Cross-Site Request Forgery

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of a…CVE-2013-4881Bigtreecms · 2.2% likely

   CWE-352

2. Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/update.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of a…CVE-2013-5313Bigtreecms · 0.9% likely

   CWE-352

3. BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within…CVE-2017-7881Bigtreecms · 0.8% likely

   CWE-352

4. CSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php - for example: /admin/pages/revisions/1/?force=false. A page with id=1 can be unlo…CVE-2017-9365Bigtreecms · 0.5% likely

   CWE-352

5. Multiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin\modules\dashboard\vitals-statistics\404\clear.php and the from or to parameter to core…CVE-2017-9379Bigtreecms · 0.5% likely

   CWE-352

6. BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script (modify user information), the index.php/admin/developer/packages/delete/ URI…CVE-2017-9444Bigtreecms · 0.5% likely

   CWE-352

7. CSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/ page. The Navigation Social can be changed.CVE-2017-6918Bigtreecms · 0.4% likely

   CWE-352

8. CSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page. The Colophon can be changed.CVE-2017-6917Bigtreecms · 0.4% likely

   CWE-352

9. CSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/ page. The Navigation Social can be changed.CVE-2017-6916Bigtreecms · 0.4% likely

   CWE-352

10. CSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page. The Colophon can be changed.CVE-2017-6915Bigtreecms · 0.4% likely

    CWE-352

11. CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted.CVE-2017-6914Bigtreecms · 0.4% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.