Fastspot BigTree CMS SQL Injection Vulnerability (CNVD-2017-08707)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in Fastspot BigTree CMS 4.2.18 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

Fastspot BigTree CMS Arbitrary Code Execution Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An arbitrary code execution vulnerability exists in Fastspot BigTree CMS and previous versions 4.2.18. The vulnerability can be exploited by a remote attacker to execute...

Fastspot BigTree CMS Cross-Site Scripting Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in Fastspot BigTree CMS versions 4.2.18 and earlier. A remote attacker can exploit this vulnerability by uploading specially...

Fastspot BigTree CMS on Windows Directory Traversal Vulnerability

Fastspot BigTree CMS on Windows is the U.S. Fastspot company's set of Winsows platform based on PHP and MySQL open source content management system CMS. A directory traversal vulnerability exists in the core\admin\ajax\developer\extensions\file-browser.php file in Fastspot BigTree CMS on Windows...

Fastspot BigTree CMS Arbitrary File Upload Vulnerability (CNVD-2017-08700)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An arbitrary file upload vulnerability exists in Fastspot BigTree CMS 4.2.18 and earlier versions. An attacker can exploit this vulnerability by uploading a 'xxx.pht' or...

Fastspot BigTree CMS Arbitrary File Upload Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An arbitrary file upload vulnerability exists in Fastspot BigTree CMS versions prior to 4.2.17. An attacker can bypass security checks and execute arbitrary code by uploadi...

Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability (CNVD-2017-03387)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.1.18. An attacker can exploit this vulnerability to perform unauthorized operations with...

Fastspot BigTree has multiple vulnerabilities

Fastspot BigTree is a PHP and MySQL based open source content management system . SQL injection vulnerabilities and cross-site scripting vulnerabilities exist in Fastspot BigTree, which can be exploited by an attacker to steal cookie-based authentication or to control the application, access or...