CVE-2017-9444

BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script (modify user information), the index.php/admin/developer/packages/delete/ URI (remove packages), the index.php/admin/developer/upgrade/ignore/?versions= URI, and the index.php/admin/developer/upgrade/set-ftp-directory/ URI.

• CWE-352

• https://github.com/bigtreecms/BigTree-CMS/issues/293Issue Tracking, Patch, Third Party Advisory
• https://github.com/bigtreecms/BigTree-CMS/issues/293Issue Tracking, Patch, Third Party Advisory

Published

Jun 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9438libyara/re.c in the regexp module in YARA 3.5.0 allows remot…
• CVE-2017-9439In ImageMagick 7.0.5-5, a memory leak was found in the funct…
• CVE-2017-9440In ImageMagick 7.0.5-5, a memory leak was found in the funct…
• CVE-2017-9441Multiple cross-site scripting (XSS) vulnerabilities in BigTr…2.7
• CVE-2017-9442BigTree CMS through 4.2.18 allows remote authenticated users…
• CVE-2017-9443BigTree CMS through 4.2.18 allows remote authenticated users…8.8
• CVE-2017-9445In systemd through 233, certain sizes passed to dns_packet_n…7.5
• CVE-2017-9447In the web interface of Parallels Remote Application Server …
• CVE-2017-9448Cross-site scripting (XSS) vulnerabilities in BigTree CMS th…
• CVE-2017-9449SQL injection vulnerability in BigTree CMS through 4.2.18 al…
• CVE-2017-9450The Amazon Web Services (AWS) CloudFormation bootstrap tools…
• CVE-2017-9451Cross site scripting (XSS) vulnerability in pages.edit_form.…