Security BigTree CMS 4.2.11 SQL Injection June 28, 2016 007admin Leave a comment BigTree CMS version 4.2.11 and below suffer from a remote authenticated SQL injection vulnerability.