BigTree-CMS 4.2.x < 4.2.17 Multiple Vulnerabilities

Binary data 700143.prm...

CVE-2017-6915

CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page. The Colophon can be changed...

CVE-2017-6915

CVE-2017-6915 affects BigTree CMS 4.1.18. The vulnerability is a CSRF issue in the colophon parameter used by the admin/settings/update/ page, allowing an attacker to alter the Colophon. The CVE is corroborated by multiple sources (Red Hat, NVD, CNVD, OSV, CVE list, etc.). The provided documents ...