baserCMS allows any file to be uploaded

There is a vulnerability that allows uploading any files to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.7.3 and earli...

GHSA-MFVG-QWCW-QVC8 baserCMS allows any file to be uploaded

There is a vulnerability that allows uploading any files to baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS 4.7.3 and earli...

GHSA-H4CC-FXPP-PGW9 baserCMS File Uploader Remote Code Execution (RCE) vulnerability

Impact There is a Remote Code Execution RCE Vulnerability on the management system of baserCMS. Target baserCMS 4.7.3 and earlier versions Patches Update to the latest version of baserCMS Credits 島峰泰平＠三井物産セキュアディレクション株式会社...

baserCMS File Uploader Remote Code Execution (RCE) vulnerability

Impact There is a Remote Code Execution RCE Vulnerability on the management system of baserCMS. Target baserCMS 4.7.3 and earlier versions Patches Update to the latest version of baserCMS Credits 島峰泰平＠三井物産セキュアディレクション株式会社...

CVE-2023-25655 baserCMS allows any file to be uploaded

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-25655 baserCMS allows any file to be uploaded

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-25655 baserCMS allows any file to be uploaded

baserCMS is a Content Management system. Prior to version 4.7.5, any file may be uploaded on the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-25655

baserCMS prior to version 4.7.5 is vulnerable to arbitrary file uploads due to an upload handling flaw in the management system. The issue affects baserCMS, with the root cause described as insufficient restrictions allowing any file to be uploaded. This can enable execution of arbitrary PHP code...

CVE-2023-25654 baserCMS File Uploader Remote Code Execution (RCE) vulnerability

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution RCE Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-25654 baserCMS File Uploader Remote Code Execution (RCE) vulnerability

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution RCE Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-25654 baserCMS File Uploader Remote Code Execution (RCE) vulnerability

baserCMS is a Content Management system. Prior to version 4.7.5, there is a Remote Code Execution RCE Vulnerability in the management system of baserCMS. Version 4.7.5 contains a patch...

CVE-2023-25654

The CVE-2023-25654 entry affects baserCMS prior to version 4.7.5, revealing a Remote Code Execution (RCE) vulnerability in the management system. The incident is documented across multiple sources (NVD/Red Hat/EUVD/GHSA) indicating a total impact if exploited, with a released patch in baserCMS 4....

baserCMS 代码问题漏洞

baserCMS is an Enterprise Content Management System CMS from the baserCMS team. A code issue vulnerability exists in versions of baserCMS prior to 4.7.5 that stems from the presence of a file upload vulnerability...

PT-2023-20214 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.7.5 Description: There is a Remote Code Execution RCE Vulnerability in the management system of baserCMS. This issue allows for remote code execution, which is a serious security concern. The estimated number of...

baserCMS 代码问题漏洞

baserCMS is an enterprise-level content management system CMS from the baserCMS team. A code issue vulnerability exists in versions of baserCMS prior to 4.7.5, which stems from a Remote Code Execution RCE vulnerability in the management system of baserCMS...

PT-2023-20215 · Basercms · Basercms

Name of the Vulnerable Software and Affected Versions: baserCMS versions prior to 4.7.5 Description: The issue allows any file to be uploaded on the management system of baserCMS. This poses a risk, especially when the management system is used by multiple users. The vulnerability enables malicio...

GHSA-7W2V-35J3-XRM9 baserCMS vulnerable to stored Cross-site Scripting

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

GHSA-VXWF-79CH-F7F7 baserCMS vulnerable to stored Cross-site Scripting

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

baserCMS vulnerable to stored Cross-site Scripting

Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

baserCMS vulnerable to stored Cross-site Scripting

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...