Approved changes feed: RSS · Atom

cpe:2.3:a:bigtreecms:bigtree_cms:4.2.18:*:*:*:*:*:*:*

part: a version: 4.2.18 update: *

VendorBigtreecms (917f96dc-c690-5eb9-834b-61a4e4e6bbae)
ProductBigtree Cms (4cab417c-988c-581b-9596-82a63607ef01)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bigtreecms/core purl2cpe 2026-06-01 10:18:15.184134
pkg:github/bigtreecms/bigtree-cms purl2cpe 2026-06-01 10:18:15.184135

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11736 vulnerable 2026-06-08 05:08:38.370181 Details available
SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via the tags array parameter.
Published: 2017-07-29T14:00:00.000Z
Updated: 2024-09-16T20:37:07.684Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.