BageCMS Cross-Site Request Forgery Vulnerability

BageCMS is a cross-platform content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in the index.php?r=admini/admin/create URL in BageCMS version 3.1.3. A remote attacker can exploit the vulnerability to add a backend administrator account...

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

CVE-2018-14582

CVE-2018-14582 affects BageCMS v3.1.3, where a CSRF flaw in index.php?r=admini/admin/create allows a remote attacker to add a background administrator account. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE records) with no explicit patch/version remediation details in t...

PT-2018-12592

Name of the Vulnerable Software and Affected Versions BageCMS version 3.1.3 Description The issue allows for CSRF to add a background administrator account through the "index.php?r=admini/admin/create" endpoint. Recommendations For BageCMS version 3.1.3, consider implementing CSRF protection...

CVE-2018-14582: Cross-Site Request Forgery (CSRF)

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

Arbitrary File Deletion Vulnerability in BageCms

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. bagecms exists arbitrary file deletion vulnerability. The vulnerability stems from the background after uploading files , delete cached files when the parameter oAttach controllable , resulti...

Arbitrary File Editing Vulnerability in bagecms v3.1.3 Version

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. bagecms v3.1.3 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and to write the contents of the file are not...

SQL Injection Vulnerability in BageCms Content Management System

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability, the vulnerability is due to the system fails to effectively filter the catalog parameters. An attacker can exploi...

SQL Injection Vulnerability in BageCms Content Management System (CNVD-2017-28290)

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability , the vulnerability is due to the system fails to effectively filter the parameters , the attacker can use the...

SQL Injection Vulnerability in BageCms

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms suffers from a SQL injection vulnerability. The lack of filtering of the 'title' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

BageCMS Management System Database Leakage Vulnerability

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. A database disclosure vulnerability exists in the BageCMS management system, allowing attackers to exploit the vulnerability to obtain sensitive database information...

Multiple Design Logic Vulnerabilities in BageCMS Content Management System Backend

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. Two design logic vulnerabilities exist in the BageCms 3.1.3 backend, allowing attackers to exploit the vulnerabilities to gain server privileges...

BageCms content management system background arbitrary file download vulnerability

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system backend arbitrary file download vulnerability , allowing attackers to exploit the vulnerability can download any file in the server...