877 matches found
Design/Logic Flaw
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form...
Code injection
baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...
CVE-2017-10843: Undefined Security Weakness
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form...
CVE-2017-10842: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2017-10844: Improper Control of Generation of Code
baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...
CVE-2017-10843
The CVE-2017-10843 issue affects baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. Affected component is the mail form’s File field, which allows an remote attacker to delete arbitrary files on the system via unspecified vectors. The root cause is described in connected advisories as an...
CVE-2017-10843
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form...
CVE-2017-10842
SQL injection vulnerability in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected product: baserCMS. Root cause: SQL injection in the application input handling (vectors not specified in the provid...
CVE-2017-10844
CVE-2017-10844 affects baserCMS 3.0.14 and earlier and 4.0.5 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code on the server via unspecified vectors. Reported CVSS scores indicate high impact (CVSS3 base 8.8; CVSS2 base 6.5). Connected sources corroborate that the is...
CVE-2017-10842
SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2017-10844
baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...
BaserCMS Directory Traversal Vulnerability
baserCMS is an enterprise-level content management system CMS. A directory traversal vulnerability exists in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. A remote attacker can exploit this vulnerability to obtain or delete arbitrary files on the system...
baserCMS SQL Injection Vulnerability
baserCMS is an enterprise-level content management system CMS. A SQL injection vulnerability exists in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands, create files, and obtain or change information in...
Multiple vulnerabilities in baserCMS
Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2017-10842 Arbitary files may be deleted - CVE-2017-10843 Arbitary PHP code execution - CVE-2017-10844 Shoji Baba reported the vulnerabilities to IPA. JPCERT/CC...
JVN#78151490: Multiple vulnerabilities in baserCMS
baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2017-10842 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 7.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
