Lucene search

MitreVULNRICHMENT:CVE-2017-9443

HistoryJun 05, 2017 - 7:00 p.m.

CVE-2017-9443

2017-06-0519:00:00

mitre

github.com

bigtree cms

sql injection

uploaded package

authenticated users

manifest.json

process.php

AI Score

7.9

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables object in manifest.json in an uploaded package. This issue exists in core\admin\modules\developer\extensions\install\process.php and core\admin\modules\developer\packages\install\process.php. NOTE: the vendor states "You must implicitly trust any package or extension you install as they all have the ability to write PHP files.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:bigtreecms:bigtree_cms:*:*:*:*:*:*:*:*"
    ],
    "vendor": "bigtreecms",
    "product": "bigtree_cms",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "4.2.18"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

github.com/bigtreecms/BigTree-CMS/issues/292