BiggiDroid vulnerabilities
We track 4 vulnerabilities in BiggiDroid products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 9, 2026.
Latest BiggiDroid vulnerabilities
- 7.2 High severity
Simple PHP CMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made
- 9.8 Critical severity
Simple PHP CMS: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed
- 7.2 High severity
Simple PHP CMS: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploi
- 7.2 High severity
Simple PHP CMS: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remot