CVE-2026-27697

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-27697: Improper Neutralization of Special Elements used in an SQL Command

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

CVE-2026-30879: Improper Neutralization of Input During Web Page Generation

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3...

PT-2026-29147

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

PT-2026-29150

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This issue has been patched in version 5.2.3...

baserCMS 跨站脚本漏洞

BaserCMS is a corporate-level content management system CMS developed by the baserCMS team. Versions of baserCMS prior to 5.2.3 had a cross-site scripting vulnerability; this vulnerability originated from a blog article-related feature module and made it susceptible to cross-site scripting attack...

baserCMS SQL注入漏洞

BaserCMS is a corporate-level content management system CMS developed by the BaserCMS team. Versions of BaserCMS prior to 5.2.3 had an SQL injection vulnerability; this vulnerability originated from the blog article-related functionality and made it susceptible to SQL injection attacks...

CVE-2025-61616

creationtimestamp| type| source ---|---|--- 2026-03-30 06:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miaycaabi223...

CVE-2026-30689

A blog.admin v.8.0 and before system's getinfobytoken API interface contains an improper access control which leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security...

CVE-2018-25210

creationtimestamp| type| source ---|---|--- 2026-03-27 19:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi2tlubztk2c...

CVE-2026-30689

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end...

CVE-2026-34359

creationtimestamp| type| source ---|---|--- 2026-03-27 13:32:19+00:00| published-proof-of-concept| https://github.com/hapifhir/org.hl7.fhir.core/security/advisories/GHSA-fgv2-4q4g-wc35 2026-03-31 19:20:27+00:00| published-proof-of-concept| Telegram/pGlKXNBirRT0gxqFC1bVLs6pojbUfu72MTdyyvCxHD2SpM...

CVE-2025-36258

creationtimestamp| type| source ---|---|--- 2026-03-27 02:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhyzidod3h2f...

CVE-2026-33914

creationtimestamp| type| source ---|---|--- 2026-03-27 01:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhyw4ztj3i2v...

CVE-2025-55263

creationtimestamp| type| source ---|---|--- 2026-03-27 00:40:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhyuz4aenf2a...

CVE-2026-30689

The Blog.Admin (v.8.0 and before) and Blog.Core (prior to commit bcb4d17 ) systems are vulnerable to sensitive data exposure due to improper access control in the getinfobytoken API interface. An unauthorized party can obtain sensitive administrator account information by utilizing a valid token....

CVE-2026-30689

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end...

PT-2026-28417

Name of the Vulnerable Software and Affected Versions Blog.Core versions prior to bcb4d17 Description The 'getinfobytoken' API endpoint contains improper access control, which allows unauthorized parties to obtain sensitive administrator account information by using a valid token. This issue lead...

CVE-2026-30689

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end...

CVE-2026-30689

In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure. Unauthorized parties can obtain sensitive administrator account information via a valid token, threatening system security. NOTE: Blog.Admin is related front-end...