Bigtree Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bigtreecms (917f96dc-c690-5eb9-834b-61a4e4e6bbae) |
|---|---|
| Product | Bigtree Cms (4cab417c-988c-581b-9596-82a63607ef01) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bigtreecms/core |
purl2cpe | 2026-06-01 10:18:15.183995 |
pkg:github/bigtreecms/bigtree-cms |
purl2cpe | 2026-06-01 10:18:15.183998 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-26670 |
vulnerable | 2026-06-08 05:23:51.431169 |
Details available
A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary commands through a crafted request sent to the server via the 'Create a New Setting' function.
Published: 2021-06-01T14:13:25.000Z
Updated: 2024-08-04T15:56:04.972Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26669 |
vulnerable | 2026-06-08 05:23:51.430852 |
Details available
A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary web scripts or HTML via the page content to site/index.php/admin/pages/update.
Published: 2021-06-01T14:13:24.000Z
Updated: 2024-08-04T15:56:04.974Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26668 |
vulnerable | 2026-06-08 05:23:51.430242 |
Details available
A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to inject a malicious SQL query to the applications via the 'Create New Feed' function.
Published: 2021-06-01T14:13:23.000Z
Updated: 2024-08-04T15:56:05.024Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18380 |
vulnerable | 2026-06-08 05:11:13.902360 |
Details available
A Session Fixation issue was discovered in Bigtree before 4.2.24. admin.php accepts a user-provided PHP session ID instead of regenerating a new one after a user has logged in to the application. The Session Fixation could allow an attacker to hijack an admin session.
Published: 2018-10-19T20:00:00.000Z
Updated: 2024-08-05T11:08:21.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10574 |
vulnerable | 2026-06-08 05:10:26.821168 |
Details available
site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files.
Published: 2018-04-30T20:00:00.000Z
Updated: 2024-09-16T17:43:54.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10364 |
vulnerable | 2026-06-08 05:10:26.610573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9548 |
vulnerable | 2026-06-08 05:10:10.117311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9547 |
vulnerable | 2026-06-08 05:10:10.117015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9546 |
vulnerable | 2026-06-08 05:10:10.116709 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9449 |
vulnerable | 2026-06-08 05:10:09.936820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9448 |
vulnerable | 2026-06-08 05:10:09.936430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9444 |
vulnerable | 2026-06-08 05:10:09.932591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9443 |
vulnerable | 2026-06-08 05:10:09.932206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9442 |
vulnerable | 2026-06-08 05:10:09.931425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9441 |
vulnerable | 2026-06-08 05:10:09.931110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9428 |
vulnerable | 2026-06-08 05:10:09.894859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9427 |
vulnerable | 2026-06-08 05:10:09.894569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9379 |
vulnerable | 2026-06-08 05:10:09.822701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9378 |
vulnerable | 2026-06-08 05:10:09.822381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9365 |
vulnerable | 2026-06-08 05:10:09.784886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9364 |
vulnerable | 2026-06-08 05:10:09.784565 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7881 |
vulnerable | 2026-06-08 05:10:06.265806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7695 |
vulnerable | 2026-06-08 05:10:05.909485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16961 |
vulnerable | 2026-06-08 05:09:07.733324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10223 |
vulnerable | 2026-06-08 05:07:17.600067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.