![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2013-4881 |
Description: | Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php. |
Test IDs: | None available |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2013-4881 Bugtraq: 20130807 Multiple Vulnerabilities in BigTree CMS (Google Search) http://archives.neohapsis.com/archives/bugtraq/2013-08/0039.html https://www.htbridge.com/advisory/HTB23165 http://osvdb.org/96009 XForce ISS Database: bigtreecms-cve20134881-csrf(86286) https://exchange.xforce.ibmcloud.com/vulnerabilities/86286 |