Bigtree Cms@* Security Vulnerabilities and Issues — Bigtree Cms@* CVE List

BigtreecmsBigtree Cms*

2 matches found

CVE•added 2018/04/30 9:0 p.m.•50 views

CVE-2018-10364

BigTree CMS

5.4CVSS5.2AI score0.0083EPSS

Save

CVE•added 2018/10/19 8:0 p.m.•46 views

CVE-2018-18380

CVE-2018-18380 affects BigTree (Bigtree) CMS prior to 4.2.24. The admin.php flow accepts a user-supplied PHP session ID after login instead of regenerating a new one, enabling session hijacking (session fixation). Documents indicate this is fixed in 4.2.24; remediation is to upgrade to 4.2.24 or ...

5.8CVSS5.4AI score0.01085EPSS

Save