CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-0570

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Authentication flaw

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

Authentication flaw

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors...

CVE-2018-0569

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0570

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0573

The CVE-2018-0573 issue affects baserCMS versions 4.1.0.1 and earlier, and 3.0.15 and earlier, enabling a remote attacker to bypass access restrictions and view files uploaded by a site user due to a failure to restrict access (CWE-264). Multiple sources (NVD, JVN, GHSA, OSV, CNVD) consistently d...

CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-0574

CVE-2018-0574 is a cross-site scripting vulnerability in baserCMS (affected: 4.1.0.1 and earlier; 3.0.15 and earlier). The attack surface is the theme management function, with vectors not publicly disclosed in the provided description. Impact: remote attackers can inject arbitrary web script or ...

CVE-2018-0574

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0569

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0575

CVE-2018-0575 affects baserCMS 4.1.0.1 and earlier, and 3.0.15 and earlier. The vulnerability allows remote attackers to bypass access restrictions in the mail form and view files uploaded by a site user via unspecified vectors. Connected sources confirm multiple vulnerabilities in baserCMS with ...

CVE-2018-0573

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0572

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors...

CVE-2018-0575

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0571

CVE-2018-0571 affects baserCMS 4.1.0.1 and earlier, where a site-operator with login privileges can upload arbitrary files via the upload file management function. The connected advisories corroborate that the vulnerability allows unrestricted file upload under authenticated conditions, enabling ...

CVE-2018-0569

Summary : CVE-2018-0569 affects baserCMS up to 4.1.0.1 and 3.0.15 and earlier. It is a command-injection vulnerability allowing remote authenticated attackers to execute arbitrary OS commands via unspecified vectors, with impact described as remote code execution under certain privileges. The iss...