Lucene search
+L

40 matches found

attackerkb
attackerkb
•added 2025/12/30 6:02 p.m.•11 views

CVE-2025-15262

A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The...

7.2CVSS5.2AI score0.00339EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2025/12/30 6:02 p.m.•38 views

CVE-2025-15262

CVE-2025-15262 affects BiggiDroid Simple PHP CMS 1.0, in the Site Logo Handler component (file /admin/edit.php). Manipulating the image argument reportedly yields unrestricted upload, enabling remote exploitation. Multiple sources confirm the exploit has been released publicly and may be exploite...

7.2CVSS5.2AI score0.00339EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/30 6:02 p.m.•7 views

CVE-2025-15262 BiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload

A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The...

5.8CVSS5.2AI score0.00339EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/12/30 6:02 p.m.•59 views

CVE-2025-15262 BiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload

A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The...

5.8CVSS0.00339EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/12/30 3:59 a.m.•28 views

CVE-2025-15169

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

7.2CVSS5AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•29 views

PT-2025-54208

A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The...

5.8CVSS6.6AI score0.00339EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•16 views

BiggiDroid Simple PHP CMS code-related vulnerabilities

BiggiDroid Simple PHP CMS is a content management system from BiggiDroid open source. A code issue vulnerability exists in BiggiDroid Simple PHP CMS version 1.0, which stems from the incorrect manipulation of the parameter image in the file /admin/edit.php, which can lead to unrestricted uploads...

7.2CVSS5.1AI score0.00339EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•23 views

PT-2025-54211

Name of the Vulnerable Software and Affected Versions BiggiDroid Simple PHP CMS version 1.0 Description A flaw exists in BiggiDroid Simple PHP CMS 1.0, specifically within the Admin Login component. Manipulation of the Username argument in the /admin/login.php file can lead to SQL injection. This...

7.5CVSS7.5AI score0.00387EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•7 views

CVE-2025-15263: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been made...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•9 views

CVE-2025-15262: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The...

7.2CVSS5.2AI score0.00339EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•18 views

BiggiDroid Simple PHP CMS SQL Injection Vulnerability

BiggiDroid Simple PHP CMS is a content management system from BiggiDroid open source. A SQL injection vulnerability exists in BiggiDroid Simple PHP CMS version 1.0, which stems from incorrect manipulation of the parameter Username in the file /admin/login.php, which can lead to SQL injection...

9.8CVSS7.9AI score0.00387EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2025/12/29 4:15 a.m.•14 views

CVE-2025-15169

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

7.2CVSS5.7AI score0.00421EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/12/29 3:02 a.m.•8 views

CVE-2025-15169 BiggiDroid Simple PHP CMS editsite.php sql injection

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

5.8CVSS5.4AI score0.00421EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2025/12/29 3:02 a.m.•10 views

CVE-2025-15169

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

7.2CVSS5.4AI score0.00421EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/12/29 3:02 a.m.•63 views

CVE-2025-15169 BiggiDroid Simple PHP CMS editsite.php sql injection

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

5.8CVSS0.00421EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/12/29 3:02 a.m.•17 views

EUVD-2025-205547

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available ...

5.8CVSS6.3AI score0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/29 3:02 a.m.•44 views

CVE-2025-15169

The CVE-2025-15169 entry concerns BiggiDroid Simple PHP CMS 1.0. Affected functionality is in /admin/editsite.php; manipulating the ID parameter can cause SQL injection. The issue is exploitable remotely and an exploit has been publicly released. Red Hat and other connected records corroborate th...

7.2CVSS5.4AI score0.00421EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/29 12:00 a.m.•9 views

CVE-2025-15169: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made availabl...

7.2CVSS5.4AI score0.00421EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/29 12:00 a.m.•21 views

BiggiDroid Simple PHP CMS SQL Injection Vulnerability

BiggiDroid Simple PHP CMS is a content management system from BiggiDroid open source. A SQL injection vulnerability exists in BiggiDroid Simple PHP CMS version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/editsite.php, which can lead to SQL injection...

7.2CVSS5.7AI score0.00421EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/29 12:00 a.m.•20 views

PT-2025-53687

Name of the Vulnerable Software and Affected Versions BiggiDroid Simple PHP CMS version 1.0 Description A weakness exists in BiggiDroid Simple PHP CMS 1.0. The issue is related to some unknown functionality within the /admin/editsite.php file. Manipulation of the ID parameter can lead to SQL...

7.2CVSS5.5AI score0.00421EPSS
SaveExploits1References9
Rows per page
Query Builder