CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

CVE-2017-6917

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed...

CVE-2017-6914

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

CVE-2017-6918

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...

EUVD-2018-9096

Malware in sbrugna...

EUVD-2018-8814

Malware in sbrugna...

EUVD-2013-4724

Malware in sbrugna...

EUVD-2020-19212

Malware in sbrugna...

EUVD-2017-8130

Malware in sbrugna...

EUVD-2017-15972

Malware in sbrugna...

EUVD-2020-10391

Malware in sbrugna...

EUVD-2018-2438

Malware in sbrugna...

EUVD-2017-15971

Malware in sbrugna...

EUVD-2018-2261

Malware in sbrugna...

EUVD-2017-18477

Malware in sbrugna...

EUVD-2017-18313

Malware in sbrugna...

EUVD-2018-2646

Malware in sbrugna...

EUVD-2017-18363

Malware in sbrugna...

EUVD-2013-4726

Malware in sbrugna...

EUVD-2018-13835

Malware in sbrugna...