CVE-2013-4881 | BDVDB-2026-57032 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/bigtreecms/BigTree-CMS/commit/4b0faa90fa8b9e1776c86db716894dcd7e6b4834
http://osvdb.org/96009
https://exchange.xforce.ibmcloud.com/vulnerabilities/86286
http://archives.neohapsis.com/archives/bugtraq/2013-08/0039.html
https://www.htbridge.com/advisory/HTB23165

Exploit#

No public exploit known

History#

Version 12013-08-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.