Bigtree Cms Security Vulnerabilities and Issues — Bigtree Cms CVE List

Lucene search

BigtreecmsBigtree Cms

3 matches found

CVE•added 2018/04/30 8:29 p.m.•40 views

CVE-2018-10574

site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files.

9.8CVSS9.8AI score0.00925EPSS

Web

CVE•added 2018/04/17 2:29 p.m.•35 views

CVE-2018-10183

An issue was discovered in BigTree 4.2.22. There is cross-site scripting (XSS) in /core/inc/lib/less.php/test/index.php because of a $_SERVER['REQUEST_URI'] echo, as demonstrated by the dir parameter in a file=charsets action.

6.1CVSS5.9AI score0.0024EPSS

Web

CVE•added 2018/04/30 9:29 p.m.•32 views

CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field.

5.4CVSS5.2AI score0.00227EPSS