455 matches found
CVE-2017-7881
BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/header.php and patched in...
CVE-2017-7881
BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/header.php and patched in...
CVE-2017-7881
BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/header.php and patched in...
CVE-2017-7881
BigTree CMS
CVE-2017-7881: Cross-Site Request Forgery (CSRF)
BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/header.php and patched in...
Fastspot BigTree CMS Arbitrary File Upload Vulnerability
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An arbitrary file upload vulnerability exists in Fastspot BigTree CMS versions prior to 4.2.17. An attacker can bypass security checks and execute arbitrary code by uploadi...
Unrestricted file upload
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...
CVE-2017-7695
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...
CVE-2017-7695
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...
CVE-2017-7695
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...
CVE-2017-7695
BigTree CMS
CVE-2017-7695: Unrestricted Upload of File with Dangerous Type
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...
Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03389)
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.16. The vulnerability can be exploited by an attacker to perform unauthorized operatio...
Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03386)
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS versions 4.1.18 and 4.2.16. A remote attacker can exploit this vulnerability to delete users with...
Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03387)
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.1.18. An attacker can exploit this vulnerability to perform unauthorized operations with...
Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03388)
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.1.18. A remote attacker can exploit this vulnerability to perform unauthorized operation...
Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.16. An attacker can exploit this vulnerability to perform unauthorized operations...
BigTree CMS Multiple CSRF Vulnerabilities
BigTree CMS is prone to multiple CSRF vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:bigtreecms:bigtreecms";...