CVE-2018-14582

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

CVE-2018-14582: Cross-Site Request Forgery (CSRF)

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account...

Arbitrary File Deletion Vulnerability in BageCms

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. bagecms exists arbitrary file deletion vulnerability. The vulnerability stems from the background after uploading files , delete cached files when the parameter oAttach controllable , resulti...

Arbitrary File Editing Vulnerability in bagecms v3.1.3 Version

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. bagecms v3.1.3 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and to write the contents of the file are not...

SQL Injection Vulnerability in BageCms Content Management System (CNVD-2017-28290)

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability , the vulnerability is due to the system fails to effectively filter the parameters , the attacker can use the...

SQL Injection Vulnerability in BageCms Content Management System

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system suffers from a SQL injection vulnerability, the vulnerability is due to the system fails to effectively filter the catalog parameters. An attacker can exploi...

SQL Injection Vulnerability in BageCms

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. BageCms suffers from a SQL injection vulnerability. The lack of filtering of the 'title' parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

BageCMS Management System Database Leakage Vulnerability

BageCms is a multi-functional open source web content management system based on php5+mysql5 development. A database disclosure vulnerability exists in the BageCMS management system, allowing attackers to exploit the vulnerability to obtain sensitive database information...

BageCms content management system background arbitrary file download vulnerability

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. BageCms content management system backend arbitrary file download vulnerability , allowing attackers to exploit the vulnerability can download any file in the server...

Multiple Design Logic Vulnerabilities in BageCMS Content Management System Backend

BageCMS is a multi-functional open source web content management system based on php5+mysql5 development. Two design logic vulnerabilities exist in the BageCms 3.1.3 backend, allowing attackers to exploit the vulnerabilities to gain server privileges...