Skip to content
OpenAdvisories

Product · BiggiDroid

Simple PHP CMS

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-15495 Public exploit

    BiggiDroid Simple PHP CMS editsite.php unrestricted upload

    A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made…

  • Medium 4.7

    BiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload

    A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote explo…

  • Medium 4.7

    BiggiDroid Simple PHP CMS editsite.php sql injection

    A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remo…