Bigtree Cms Security Vulnerabilities and Issues — Bigtree Cms CVE List

Lucene search

BigtreecmsBigtree Cms

4 matches found

CVE•added 2013/08/14 1:49 p.m.•99 views

CVE-2013-4879

SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php.

7.5CVSS8.3AI score0.02034EPSS

CVE•added 2013/08/19 1:7 p.m.•48 views

CVE-2013-4881

Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php.

6.8CVSS7.1AI score0.00332EPSS

CVE•added 2013/08/14 1:50 p.m.•45 views

CVE-2013-4880

Cross-site scripting (XSS) vulnerability in core/admin/modules/developer/modules/views/add.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.

4.3CVSS5.6AI score0.04522EPSS

CVE•added 2013/08/19 9:10 p.m.•36 views

CVE-2013-5313

Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that modify arbitrary user accounts via an edit user action.

6.8CVSS7.5AI score0.00121EPSS