BC
Product
Bigtree Cms
44
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 15Medium 21Low 1
Watch
Add Bigtree Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10574 | 9.8 | Apr 30 | site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in… Affected: through 4.2.22 |
| CVE-2017-9364 | 9.8 | Jun 2 | Unrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht' or 'xxx.phtml' file, they could bypass a safety check and execute any code Affected: through 4.2.18 |
| CVE-2017-7695 | 9.8 | Apr 11 | Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any code Affected: through 4.2.16 |
Showing 3
