CVE-2018-17030

PoC —

CVSS 3.0

7.5 high

EPSS

2%p82

Published

Sep 14, 2018 (Sep 14, 2018)

Modified

Jun 17, 2026

Description

BigTree CMS 4.2.23 allows remote authenticated users, if possessing privileges to set hooks, to execute arbitrary code via /core/admin/auto-modules/forms/process.php.

Vendors: bigtreecms
Products: bigtree cms
Weakness: CWE-94
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.