JVN#54676967: baserCMS plugin "BurgerEditor" vulnerable to directory listing

baserCMS plugin "BurgerEditor" provided by D-ZERO CO.,LTD. contains a directory listing vulnerability CWE-548, CVE-2024-44807. If accessing a URL of the web site using the plugin that has a specific string added to the end, a list of uploaded files may be obtained. In addition, the uploaded file...

BaserCMS Command Injection Vulnerability (CNVD-2024-13537)

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A command injection vulnerability exists in versions of baserCMS prior to 5.0.9, which stems from a failure to properly filter constructed command special characters, commands, etc. in the site search function. ...

The vulnerability of the CMS system BaserCMS arises from the lack of measures taken to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of the CMS system BaserCMS exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Multiple vulnerabilities in baserCMS

Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Reflected cross-site scripting vulnerability in Site search Feature CWE-79 - CVE-2023-44379 Stored cross-site scripting vulnerability in Content Management CWE-79 - CVE-2024-26128 OS command...

JVN#73283159: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. Reflected cross-site scripting vulnerability in Site search Feature CWE-79 - CVE-2023-44379 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS...

Cross Site Scripting (XSS)

baserproject/basercms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate input validation, allowing attackers to inject malicious scripts into the search functionality...

Cross Site Scripting (XSS)

baserproject/basercms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper sanitation with the content management feature in View/Helper/BcAdminFormHelper.php, which allows an attacker to inject and execute arbitrary JavaScript in the browser...

GHSA-66C2-P8RH-QX87 baserCMS Cross-site Scripting vulnerability in Site search Feature

There is a XSS Vulnerability in Site search Feature to baserCMS. Target baserCMS 5.0.8 and earlier versions Vulnerability Malicious code may be executed in Site search Feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

baserCMS Cross-site Scripting vulnerability in Site search Feature

There is a XSS Vulnerability in Site search Feature to baserCMS. Target baserCMS 5.0.8 and earlier versions Vulnerability Malicious code may be executed in Site search Feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more...

GHSA-77FC-4CV5-HMFR baserCMS OS command injection vulnerability in Installer

There is a OS command injection in Installer Feature to baserCMS. Target baserCMS 5.0.8 and earlier versions Vulnerability Malicious command may be executed in Installer. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information...

baserCMS OS command injection vulnerability in Installer

There is a OS command injection in Installer Feature to baserCMS. Target baserCMS 5.0.8 and earlier versions Vulnerability Malicious command may be executed in Installer. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference for more information...

GHSA-JJXQ-M8H3-4VW5 baserCMS Cross-site Scripting vulnerability in Content Management

There is a XSS Vulnerability in Content Management Feature to baserCMS. Target baserCMS 5.0.8 and earlier versions Vulnerability Malicious code may be executed in Content Management Feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference f...

baserCMS Cross-site Scripting vulnerability in Content Management

There is a XSS Vulnerability in Content Management Feature to baserCMS. Target baserCMS 5.0.8 and earlier versions Vulnerability Malicious code may be executed in Content Management Feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to reference f...

CVE-2024-26128

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability...

Cross site scripting

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability...

CVE-2024-26128 baserCMS Cross-site Scripting vulnerability in Content Management

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability...

CVE-2024-26128

CVE-2024-26128 applies to baserCMS. A cross-site scripting vulnerability exists in the Content Management feature in versions prior to 5.0.9. The issue is mitigated by upgrading to 5.0.9 or later, which includes the fix. Connected sources also reference fixes in 5.0.10 per later advisories. The v...

CVE-2024-26128 baserCMS Cross-site Scripting vulnerability in Content Management

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability...

CVE-2024-26128 baserCMS Cross-site Scripting vulnerability in Content Management

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability...

CVE-2023-44379

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the site search feature. Version 5.0.9 contains a fix for this vulnerability...