Bigant Server
Approved changes feed: RSS · Atom
cpe:2.3:a:bigantsoft:bigant_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bigantsoft (95c53b38-d56b-5502-9de7-0c5b6491a66c) |
|---|---|
| Product | Bigant Server (55bcc57c-94fd-5dcd-8129-b6d7006fc31b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0364 |
vulnerable | 2026-06-08 07:02:24.457509 |
BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE
CRITICAL (9.8)
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the attacker can upload and execute arbitrary PHP code using the "Cloud Storage Addin," leading to unauthenticated code execution.
Published: 2025-02-04T17:51:18.472Z
Updated: 2026-05-14T02:07:17.176Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.