BigTree-CMS 4.2.x < 4.2.17 Multiple Vulnerabilities

Binary data 700143.prm...

CVE-2017-6914

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

PT-2017-17411

Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.1.18 through 4.2.16 Description The issue concerns a CSRF problem. It affects the "admin/ajax/users/delete/" page, specifically with the id parameter. This allows an unauthorized user deletion. Recommendations For BigTre...

CVE-2017-6914: Cross-Site Request Forgery (CSRF)

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

票友 ERP 管理系统 <=10.5.6 Ajax/users.ashx 未授权访问

No description provided by source...