CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

CVE-2017-6917

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed...

CVE-2017-6914

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

CVE-2017-6918

CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Navigation Social can be changed...

EUVD-2018-8814

Malware in sbrugna...

EUVD-2018-17776

Malware in sbrugna...

EUVD-2013-4725

Malware in sbrugna...

EUVD-2013-4724

Malware in sbrugna...

EUVD-2020-19212

Malware in sbrugna...

EUVD-2017-18478

Malware in sbrugna...

EUVD-2018-2438

Malware in sbrugna...

EUVD-2017-18381

Malware in sbrugna...

EUVD-2017-16856

Malware in sbrugna...

EUVD-2017-18363

Malware in sbrugna...

EUVD-2017-18299

Malware in sbrugna...

EUVD-2018-2261

Malware in sbrugna...

EUVD-2017-18362

Malware in sbrugna...

EUVD-2018-9096

Malware in sbrugna...

EUVD-2017-15971

Malware in sbrugna...

EUVD-2016-1408

Malware in sbrugna...