75 matches found
PT-2023-25789 · Bagecms · Bagecms
Name of the Vulnerable Software and Affected Versions: Bagecms version 3.1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module. This enables attackers to potentially...
BageCms v3.1.0 Code Execution Vulnerability at Backend Template Function
Bage Content Management System BageCms is a web content management system based on php+mysql. BageCms v3.1.0 code execution vulnerability exists at the background template function, allowing attackers to remotely execute commands and gain server privileges...
Sql injection
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter...
CVE-2019-8421
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter...
CVE-2019-8421
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter...
CVE-2019-8421
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter...
CVE-2019-8421
CVE-2019-8421 affects BageCMS up to version 3.1.4. The vulnerability is an SQL Injection in the file upload/protected/modules/admini/views/post/index.php triggered via the title or titleAlias parameters. Public references in NVD and CVE records confirm the path and parameter-based injection vecto...
PT-2019-19023
Name of the Vulnerable Software and Affected Versions BageCMS versions through 3.1.4 Description The issue allows SQL Injection via the title or titleAlias parameter in the upload/protected/modules/admini/views/post/index.php file. Recommendations For BageCMS versions through 3.1.4, update to a...
CVE-2019-8421: Improper Neutralization of Special Elements used in an SQL Command
upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter...
CVE-2018-19560
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...
CVE-2018-19560
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...
Cross site request forgery (csrf)
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...
CVE-2018-19560
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...
CVE-2018-19560
CVE-2018-19560 affects BageCMS 3.1.3. The vulnerability is a Cross‑Site Request Forgery (CSRF) where an attacker can trigger actions via the endpoint upload/index.php?r=admini/admin/ownerUpdate to modify a user account. Several connected sources (NVD, Red Hat, CVE registries, CNVD) corroborate th...
PT-2018-15005
Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description The issue allows for CSRF, enabling modification of a user account through the upload/index.php?r=admini/admin/ownerUpdate API endpoint. Recommendations For BageCMS version 3.1.3, update to a newer version tha...
BageCMS Cross-Site Request Forgery Vulnerability (CNVD-2019-00135)
BageCMS is a cross-platform content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in BageCMS version 3.1.3. A remote attacker can exploit this vulnerability to modify user accounts with the help of the upload/index.php?r=admini/admin/ownerUpdate U...
CVE-2018-19560: Cross-Site Request Forgery (CSRF)
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account...
CVE-2018-19104
In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges...