What’s Vulnerable › Vulnerabilities

CVE-2017-7695

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-04-11 · updated 2026-06-17
• Weakness: CWE-434

Description

Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they could bypass a safety check and execute any code.

Affected products

• Bigtreecms Bigtree Cms: through 4.2.16

References

• http://www.math1as.com/bigtree_upload.txt
• https://github.com/bigtreecms/BigTree-CMS/commit/8cf4212ea40e1b843e1aecf4b24681b0964ec04c
• https://github.com/bigtreecms/BigTree-CMS/issues/276
• http://www.math1as.com/bigtree_upload.txt
• https://github.com/bigtreecms/BigTree-CMS/commit/8cf4212ea40e1b843e1aecf4b24681b0964ec04c
• https://github.com/bigtreecms/BigTree-CMS/issues/276

Get alerted when CVE-2017-7695 or the next vulnerability affects your stack