CVE Catalog
CVE-2017-7695
CriticalSummary
Unrestricted File Upload exists in BigTree CMS before version 4.2.17. An attacker can upload an 'xxx.php[space]' file, allowing them to bypass a safety check and execute arbitrary code.
Risk Assessment
This vulnerability poses a serious risk to organizations by allowing attackers to execute remote code, potentially leading to system compromise.
Recommendation
It is recommended to update BigTree CMS to version 4.2.17 or later to mitigate this vulnerability and implement additional security measures for uploaded files.
Original NVD description (English source)
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any code.