https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:36:01.185211+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-20405 CVE-2018-20405 2026-10-10T14:36:01.186296+00:00

Affected: bigtreecms bigtree

BigTree 4.3 allows full path disclosure via authenticated admin/news/ input that triggers a syntax error. NOTE: This has been disputed with the following reasoning: "The issue reported requires full developer level access to the content management system where cross site scripting is not an issue -- you already have full control of the CMS including running arbitrary PHP.