CVE-2018-0570

CVE-2018-0570 is an XSS vulnerability in baserCMS affecting baserCMS 4.1.0.1 and earlier and 3.0.15 and earlier. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details from multiple sources indicate that a site operator login...

CVE-2018-0572

CVE-2018-0572 affects baserCMS 4.1.0.1 and earlier, and 3.0.15 and earlier. The vulnerability is an access control bypass in the contents management function that could let remote authenticated attackers view or alter restricted content via unspecified vectors. The connected advisories corroborat...

Multiple vulnerabilities in baserCMS

Overview baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-0569 Cross-site scripting CWE-79 - CVE-2018-0570 Unrestricted Upload of File with Dangerous Type in uploa...

BaserCMS Command Injection Vulnerability

baserCMS is an enterprise-level content management system CMS. A security vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier. A remote attacker can exploit the vulnerability to execute arbitrary operating system commands...

BaserCMS Unlimited File Upload Vulnerability

baserCMS is an enterprise-level content management system CMS. A security vulnerability exists in baserCMS version 4.1.0.1 and earlier and version 3.0.15 and earlier. A remote attacker can exploit the vulnerability to upload arbitrary files...

BaserCMS Access Privilege Bypass Vulnerability

baserCMS is an enterprise-level content management system CMS. A privilege bypass vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. A remote attacker can exploit this vulnerability to bypass access...

BaserCMS Restricted Access Vulnerability

baserCMS is an enterprise-level content management system CMS. A restricted access vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. A remote attacker can use this vulnerability to bypass access...

BaserCMS Privilege Access Control Vulnerability

baserCMS is an enterprise-level content management system CMS. A privilege access control vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. The vulnerability can be exploited by a remote attacker to bypas...

BaserCMS Cross-Site Scripting Vulnerability (CNVD-2018-15279)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

JVN#67881316: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-0569 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L| Base Score: 6.3 CVS...

BaserCMS Cross-Site Scripting Vulnerability (CNVD-2018-15278)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2017-10844

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...

CVE-2017-10844

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...

CVE-2017-10842

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10843

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form...

CVE-2017-10843

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form...

Sql injection

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form...

Code injection

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...

CVE-2017-10843

The CVE-2017-10843 issue affects baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. Affected component is the mail form’s File field, which allows an remote attacker to delete arbitrary files on the system via unspecified vectors. The root cause is described in connected advisories as an...