Skip to content

CVE-2017-11736 SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via the tags array parameter.

HighCVSS 8.8 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via the tags array parameter.

Affected products

ProductAffected versionsFixed in
bigtreecms bigtree cms = 4.2.18 No fix listed

References

  • github.com issue-tracking patch third-party-advisory