Bigtreecms Bigtree vulnerabilities

• bigtreecms bigtree cms Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute... CVE-2023-44954 5.4 MediumNovember 1, 2023
• bigtreecms bigtree cms BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows... CVE-2022-36197 5.4 MediumAugust 3, 2022
• bigtreecms bigtree cms Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found... CVE-2020-18467 5.4 MediumAugust 26, 2021
• bigtreecms bigtree cms A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an... CVE-2020-26670 8.8 HighJune 1, 2021
• bigtreecms bigtree cms A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and... CVE-2020-26669 5.4 MediumJune 1, 2021
• bigtreecms bigtree cms A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and... CVE-2020-26668 8.8 HighJune 1, 2021
• bigtreecms bigtree ** DISPUTED ** BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that... CVE-2018-20405 Disputed 2.7 LowDecember 23, 2018
• bigtreecms bigtree cms A Session Fixation issue was discovered in Bigtree before 4.2.24. admin.php accepts a user... CVE-2018-18380 5.4 MediumOctober 19, 2018
• bigtreecms bigtree cms In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax... CVE-2018-18308 Public exploit 6.1 MediumOctober 16, 2018
• bigtreecms bigtree cms BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote... CVE-2018-17341 8.1 HighSeptember 23, 2018
• bigtreecms bigtree cms BigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to... CVE-2018-17030 7.5 HighSeptember 14, 2018
• bigtreecms bigtree cms BigTree-CMS contains a Cross Site Scripting (XSS) vulnerability in /users/create that can result... CVE-2018-1000521 6.1 MediumJune 26, 2018
• bigtreecms bigtree cms BigTree before 4.2.22 has XSS in the Users management page via the name or company field. CVE-2018-10364 5.4 MediumApril 30, 2018
• bigtreecms bigtree cms site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload... CVE-2018-10574 9.8 CriticalApril 30, 2018
• bigtreecms bigtree cms An issue was discovered in BigTree 4.2.22. There is cross-site scripting (XSS) in /core/inc/lib... CVE-2018-10183 6.1 MediumApril 17, 2018
• bigtreecms bigtree cms Cross-site scripting (XSS) in BigTree 4.2.19 allows any remote users to inject arbitrary web... CVE-2018-6013 5.4 MediumJanuary 23, 2018
• bigtreecms bigtree cms A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows... CVE-2017-16961 6.5 MediumNovember 27, 2017
• bigtreecms bigtree cms SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows... CVE-2017-11736 8.8 HighJuly 29, 2017
• bigtreecms bigtree cms admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows... CVE-2017-9548 5.4 MediumJune 12, 2017
• bigtreecms bigtree cms admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows... CVE-2017-9547 5.4 MediumJune 12, 2017
• bigtreecms bigtree cms admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of... CVE-2017-9546 5.7 MediumJune 12, 2017
• bigtreecms bigtree cms SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to... CVE-2017-9449 8.8 HighJune 6, 2017
• bigtreecms bigtree cms Cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote... CVE-2017-9448 5.4 MediumJune 6, 2017
• bigtreecms bigtree cms BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php... CVE-2017-9444 8.8 HighJune 5, 2017
• bigtreecms bigtree cms ** DISPUTED ** BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL... CVE-2017-9443 Disputed 8.8 HighJune 5, 2017
• bigtreecms bigtree cms ** DISPUTED ** BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary... CVE-2017-9442 Disputed 8.8 HighJune 5, 2017
• bigtreecms bigtree cms ** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18... CVE-2017-9441 Disputed 5.4 MediumJune 5, 2017
• bigtreecms bigtree cms A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser... CVE-2017-9428 7.5 HighJune 4, 2017
• bigtreecms bigtree cms SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to... CVE-2017-9427 8.8 HighJune 4, 2017
• bigtreecms bigtree cms Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin... CVE-2017-9379 8.8 HighJune 2, 2017
• bigtreecms bigtree cms BigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could... CVE-2017-9378 6.5 MediumJune 2, 2017
• bigtreecms bigtree cms CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php ... CVE-2017-9365 8.8 HighJune 2, 2017
• bigtreecms bigtree cms Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht... CVE-2017-9364 9.8 CriticalJune 2, 2017
• bigtreecms bigtree cms BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote... CVE-2017-7881 8.8 HighApril 15, 2017
• bigtreecms bigtree cms Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php... CVE-2017-7695 9.8 CriticalApril 11, 2017
• bigtreecms bigtree cms CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/... CVE-2017-6918 4.3 MediumMarch 15, 2017
• bigtreecms bigtree cms CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page.... CVE-2017-6917 4.3 MediumMarch 15, 2017
• bigtreecms bigtree cms CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/... CVE-2017-6916 4.3 MediumMarch 15, 2017
• bigtreecms bigtree cms CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page.... CVE-2017-6915 4.3 MediumMarch 15, 2017
• bigtreecms bigtree cms CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete... CVE-2017-6914 7.1 HighMarch 15, 2017
• bigtreecms bigtree cms An issue was discovered in BigTree CMS before 4.2.15. The vulnerability exists due to... CVE-2016-10223 5.4 MediumFebruary 14, 2017
• bigtreecms bigtree cms Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree... CVE-2013-5313 6.8 MediumAugust 19, 2013
• bigtreecms bigtree cms Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree... CVE-2013-4881 Public exploit 6.8 MediumAugust 19, 2013
• bigtreecms bigtree cms Cross-site scripting (XSS) vulnerability in core/admin/modules/developer/modules/views/add.php in... CVE-2013-4880 Public exploit 4.3 MediumAugust 13, 2013
• bigtreecms bigtree cms SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows... CVE-2013-4879 Public exploit 7.5 HighAugust 13, 2013