8 matches found
CVE-2017-6916
CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...
Cross site request forgery (csrf)
CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6916
CSRF exists in BigTree CMS 4.1.18 with the nav-social parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6918
CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6918
CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...
CVE-2017-6918
BigTree CMS 4.2.16 exposes a CSRF vulnerability via the value[#][*] parameter to the /admin/settings/update/ page, which can change Navigation Social settings. Affected component is the admin settings handler; root cause is cross-site request forgery without user interaction risk details provided...
CVE-2017-6918: Cross-Site Request Forgery (CSRF)
CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...
PT-2017-17415
Name of the Vulnerable Software and Affected Versions BigTree CMS version 4.2.16 Description A CSRF issue exists, allowing the Navigation Social to be changed by manipulating the value parameter in the "admin/settings/update/" page. Recommendations For BigTree CMS version 4.2.16, as a temporary...