CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

CVE-2017-6917

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed...

CVE-2017-6914

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

CVE-2017-6918

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...

EUVD-2013-4726

Malware in sbrugna...

EUVD-2017-18381

Malware in sbrugna...

EUVD-2013-4724

Malware in sbrugna...

EUVD-2017-15968

Malware in sbrugna...

EUVD-2013-4725

Malware in sbrugna...

EUVD-2017-18479

Malware in sbrugna...

EUVD-2017-3346

Malware in sbrugna...

EUVD-2017-18299

Malware in sbrugna...

EUVD-2020-19210

Malware in sbrugna...

EUVD-2017-18314

Malware in sbrugna...

EUVD-2016-1400

Malware in sbrugna...

EUVD-2018-10111

Malware in sbrugna...

EUVD-2017-18363

Malware in sbrugna...

EUVD-2017-18313

Malware in sbrugna...

EUVD-2018-2261

Malware in sbrugna...

EUVD-2017-18300

Malware in sbrugna...