AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-9449

HIGH · CVSS 8.8 EPSS 1.07% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-9449
Severity
HIGH
CVSS
8.8
EPSS
1.07%

Original NVD Description

SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core/admin/modules/developer/modules/views/create.php. The attacker creates a crafted table name at admin/developer/modules/views/create/ and the injection is visible at admin/ajax/auto-modules/views/searchable-page/ or admin/modules_name.