AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-7881

HIGH · CVSS 8.8 EPSS 0.75% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-04-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-7881
Severity
HIGH
CVSS
8.8
EPSS
0.75%

Original NVD Description

BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an HTTP Referer header. This was found in core/admin/modules/developer/_header.php and patched in core/inc/bigtree/admin.php on 2017-04-14.