CVE:CVE-2018-25076
CNNVD:CNNVD-202301-1182
bigtree-events是Tim Buckingham个人开发者的一个 BigTree CMS 的事件扩展。
timbuckingham bigtree-events存在SQL注入漏洞，该漏洞源于文件classes/events.php的函数getRandomFeaturedEventByDate/getUpcomingFeaturedEventsInCategoriesWithSubcategories/recacheEvent/searchResults存在安全问题，导致SQL注入。
solution:Upgrade events_project events to a higher version than 2018-03-19,and avoid the version (,2018-03-19)