CVE-2016-4876

2017-05-1218:29:00

Google

osv.dev

AI Score

8.4

Confidence

Low

EPSS

0.002

Percentile

61.9%

JSON

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors.

References

basercms.net/security/JVN92765814

www.securityfocus.com/bid/93217

jvn.jp/en/jp/JVN92765814/index.html