Remote Code Execution

openmage/magento-lts is vulnerable to Remote Code Execution. The vulnerability exists in the deleteDirectory function in Storage.php which allows an attacker to delete arbitrary files and execute arbitrary code into the server...

CVE-2018-10574: Improper Control of Generation of Code

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files...

filekok.com XSS vulnerability

Vulnerable URL: http://www.filekok.com/main/storage.php?second=1=list=keyword=type=MEDtype=MED⊂sec=count=20=sort=tot====chk===1"...

BigTree-CMS 4.2.x < 4.2.17 Multiple Vulnerabilities

Binary data 700143.prm...