CVE-2017-9427
HighSummary
SQL injection vulnerability in BigTree CMS version 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via form-create.php. An attacker can create a crafted table name, exposing the vulnerability in the admin dashboard.
Risk Assessment
The organization may be exposed to unauthorized data access and the potential for database modification by malicious users. This could lead to data integrity loss and breaches of information confidentiality.
Recommendation
It is recommended to update BigTree CMS to the latest version to mitigate this vulnerability. Additionally, implementing further security measures, such as restricting access to the admin panel, is advisable.
Other vulnerabilities in BigTree CMS 4.2.18
See all- CVE-2017-9449High
SQL injection vulnerability in BigTree CMS version 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via create.php.
- CVE-2017-9444High
BigTree CMS versions up to 4.2.18 are vulnerable to CSRF attacks related to various scripts and URIs that allow modification of user information and removal of packages.
- CVE-2017-9379High
Multiple CSRF issues exist in BigTree CMS through version 4.2.18, related to the clear parameter in core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameters in core\admin\modules\dashboard\vitals-statistics\404\create-301.php.
- CVE-2017-9365High
CSRF exists in BigTree CMS through version 4.2.18, allowing a page to be unlocked using the force parameter in a request to /admin/pages/revisions.php.
- CVE-2017-7881High
BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, allowing remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header.
- CVE-2017-6914High
CSRF exists in BigTree CMS versions 4.1.18 and 4.2.16, allowing a user to be deleted via the admin/ajax/users/delete/ page with the id parameter.
- CVE-2017-9364Critical
BigTree CMS version 4.2.18 has an unrestricted file upload vulnerability. An attacker can upload an 'xxx.pht' or 'xxx.phtml' file, allowing them to bypass safety checks and execute arbitrary code.
- CVE-2017-7695Critical
Unrestricted File Upload exists in BigTree CMS before version 4.2.17. An attacker can upload an 'xxx.php[space]' file, allowing them to bypass a safety check and execute arbitrary code.
Original NVD description (English source)
SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core\admin\modules\developer\modules\designer\form-create.php. The attacker creates a crafted table name at admin/developer/modules/designer/ and the injection is visible at admin/dashboard/vitals-statistics/integrity/check/?external=true.