Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4878

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4882

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4877

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4876

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...

CVE-2016-4879

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4883

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4877

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4887

Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4880

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4885

CVE-2016-4885 is a cross-site request forgery (CSRF) vulnerability in baserCMS and its Feed plugin (version 3.0.10 and earlier). When the Feed plugin is enabled, a logged-in administrator who visits a malicious URL can be forced to perform unintended operations on the baserCMS server, hijacking a...

CVE-2016-4876

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...

CVE-2016-4877

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4884

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4878

baserCMS 3.0.10 and earlier is affected by a Cross-site request forgery (CSRF) vulnerability that enables an attacker to hijack the authentication of administrators via unspecified vectors. The exploitable scope covers baserCMS itself and related plugins (Blog, Mail, Feed, Uploader) as listed in ...

CVE-2016-4880

CVE-2016-4880 is a stored cross-site scripting vulnerability in baserCMS environments, affecting baserCMS core (3.0.10 and earlier) and the Blog plugin (3.0.10 and earlier). The incident arises from insufficient input filtering, allowing an attacker with Administrative access to inject arbitrary ...

CVE-2016-4883

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4887

CVE-2016-4887 is a CSRF vulnerability affecting baserCMS and its Uploader plugin. Restated details from multiple sources show that when the Uploader plugin is enabled and an administrative user visits a malicious URL, the attacker could cause unintended administrative operations (e.g., file delet...