CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver Account Takeover tramite CSRF non autenticato in BigTreeCMS v4.4.14 Tutti i moduli ricercabili nel pannello di amministrazione di BigTreeCMS v4.4.14 sono vulnerabili a DOM-XSS riflesso tramite l'URI. Le query di ricerca vengono riflesse nell...

BigtreeCMS 4.4.11 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerability in BigtreeCMS Affected Software: BigtreeCMS Affected Versions: 4.4.11 Vendor Homepage: https://www.bigtreecms.org/ Vulnerability Type: Cross-Site Scripting Severity: Important Status: Fixed CVE-ID:...

BigTreeCMS Version Detection

Binary data 9436.prm...