Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-4879.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in BigTree CMS 4.0 RC2, including SQL injection via crafted URL parameters, CSRF for privilege escalation, and XSS through unsanitized input. The PoC includes functional examples for each vulnerability type.
Description
SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in BigTree CMS 4.0 RC2, including SQL injection via crafted URL parameters, CSRF for privilege escalation, and XSS through unsanitized input. The PoC includes functional examples for each vulnerability type.