CVE-2017-9364

CVE-2017-9364 is an unrestricted file upload vulnerability affecting BigTree CMS through version 4.2.18, allowing attackers to bypass safety checks by uploading files with specific extensions like '.pht' or '.phtml'. This critical vulnerability, rated 9.8 CVSS, has a low attack complexity and requires no user interaction, enabling full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness.