CVE-2016-4883

CVE-2016-4883 affects baserCMS 3.0.10 and earlier. It is a cross-site scripting vulnerability (unspecified vectors) that could allow an attacker to inject arbitrary scripts/HTML, potentially executing in the victim’s browser. The connected sources indicate a stored/ reflected XSS exposure within ...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4886

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4879

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4882

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4879

CVE-2016-4879 describes a Cross-site request forgery (CSRF) vulnerability in baserCMS and its Mail plugin (version 3.0.10 and earlier). The affected components are baserCMS core and plugins Mail, Blog, Feed, and Uploader (all 3.0.10 and earlier per JVN/NVD summaries). The vulnerability allows a l...

CVE-2016-4876

CVE-2016-4876 is a CSRF vulnerability affecting baserCMS up to version 3.0.10 (and related plugins). An attacker could exploit a logged-in administrator session to cause arbitrary PHP code execution on the server via unspecified vectors, effectively hijacking admin actions. Impact ranges include ...

CVE-2016-4877

CVE-2016-4877 is a stored cross-site scripting vulnerability affecting baserCMS and the Mail plugin (version 3.0.10 and earlier). The flaw allows a user in the Administrative group to insert arbitrary script or HTML that may execute in other administrative contexts. Root cause: insufficient input...

CVE-2016-4881

CVE-2016-4881 is a CSRF vulnerability affecting baserCMS when the Blog plugin (and related components) is enabled. The affected scope is baserCMS version 3.0.10 and earlier, including the Blog plugin version 3.0.10 and earlier. The root cause is cross-site request forgery that can allow a logged-...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08864)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. The vulnerability can be exploited by an attacker to perform unauthorized operations on the server when the Feed plugin is enabled and a user...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08865)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08866)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08863)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. The vulnerability can be exploited by an attacker to perform unauthorized operations on the server when the Mail plugin is enabled and a user...

BaserCMS Cross-Site Request Forgery Vulnerability

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. When the Mail plugin is enabled and a user accesses a malicious URL, an attacker can exploit the vulnerability to perform unauthorized operations...

BaserCMS cross-site scripting vulnerability (CNVD-2016-08858)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08860)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08861)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions. An attacker can exploit this vulnerability by tricking a user into visiting a malicious URL to execute arbitrary PHP code on the server...

BaserCMS cross-site scripting vulnerability (CNVD-2016-08857)

baserCMS is an enterprise-level content management system CMS. A cross-site scripting vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authenticati...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08859)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

baserCMS plugin Uploader vulnerable to cross-site request forgery

Overview baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugin Uploader contain a cross-site request forgery vulnerability. Masamu Asato of National Institute of Technology, Okinawa College reported this vulnerability to IPA. JPCERT/CC...