Vulnerabilities

TI-2012-04362 CVE-2012-5173 · GHSA-wqwh-gv3x-v5mx

Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack…

LOW 33

Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01309 Published 2012-11-23 No fix listed

TI-2011-03268 CVE-2011-3711 · GHSA-c94w-cpc6-vfv3

BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request…

LOW 26

BIGACE 2.7.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/libs/javascript.inc.php and cer…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2009-02975 CVE-2009-3120 · GHSA-9m3w-j6gp-86c9

Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows…

LOW 22

Cross-site scripting (XSS) vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2009-09-09 No fix listed CWE-79

TI-2008-02412 CVE-2008-2520 · GHSA-rfp2-4wxc-f3jf

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals…

LOW 38

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][addon] parameter to (a)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02505 Published 2008-06-03 No fix listed CWE-94

TI-2006-04271 CVE-2006-4423 · GHSA-gcc2-56h2-xhh2

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers…

LOW 39

Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[_BIGACE][DIR][admin] parameter in (a) system/command/admin.cmd.php, (b)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03151 Published 2006-08-29 No fix listed