Bigtree Cms@4.2.23 Security Vulnerabilities and Issues — Bigtree Cms@4.2.23 CVE List

Lucene search

BigtreecmsBigtree Cms4.2.23

3 matches found

CVE•added 2018/10/16 10:29 p.m.•46 views

CVE-2018-18308

In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (aka the image upload area).

6.1CVSS5.8AI score0.0604EPSS

CVE•added 2018/09/14 2:29 a.m.•29 views

CVE-2018-17030

BigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to execute arbitrary code via /core/admin/auto-modules/forms/process.php.

7.5CVSS7.6AI score0.02417EPSS

CVE•added 2018/09/23 5:29 a.m.•28 views

CVE-2018-17341

BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtree_htaccess_url=admin/images/..\ URI.

8.1CVSS8.1AI score0.00461EPSS