PT-2019-11287

Name of the Vulnerable Software and Affected Versions: baigoStudio baigoSSO version 3.0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen. This is possible because the code is written to the BG SITE NAME field in the...

PT-2019-19450

Name of the Vulnerable Software and Affected Versions baigo CMS version 2.1.1 Description A remote code execution issue was discovered, allowing attackers to execute arbitrary code. This can be achieved by writing malicious code into the opt base.inc.php file using the BG SITE NAME parameter...