baigo CMS Arbitrary Code Execution Vulnerability

baigo CMS is a PHP-based open source web content management system. An arbitrary code execution vulnerability exists in baigo CMS 2.1.1. The vulnerability stems from the BGSITENAME parameter with malicious code that can be written to the optbase.inc.php file. A remote attacker can exploit this...

PT-2019-19449

Name of the Vulnerable Software and Affected Versions baigo CMS version 2.1.1 Description A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the optbaseBG SITE NAME parameter to the "bg console/index.php?m=opt&c=request" URI. Recommendations For baigo CMS...

PT-2019-19450

Name of the Vulnerable Software and Affected Versions baigo CMS version 2.1.1 Description A remote code execution issue was discovered, allowing attackers to execute arbitrary code. This can be achieved by writing malicious code into the opt base.inc.php file using the BG SITE NAME parameter...