CVE-2023-44954

概要

参考情報

• Ciber-Mike/BigTree_CMS-Stored_XSS-Developer_Settings · Exploit
• bigtreecms.org/download/core · Product

bigtree cms のその他の脆弱性

• CVE-2022-36197中 5.4BigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a c…
• CVE-2020-18467中 5.4Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via …
• CVE-2020-26670高 8.8A vulnerability has been discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to execute arbitrary commands t…
• CVE-2020-26669中 5.4A stored cross-site scripting (XSS) vulnerability was discovered in BigTree CMS 4.4.10 and earlier which allows an authenticated attacker to…
• CVE-2020-26668高 8.8A SQL injection vulnerability was discovered in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier which allows an authenticated attac…