CVE-2016-4883

CVE-2016-4883 affects baserCMS 3.0.10 and earlier. It is a cross-site scripting vulnerability (unspecified vectors) that could allow an attacker to inject arbitrary scripts/HTML, potentially executing in the victim’s browser. The connected sources indicate a stored/ reflected XSS exposure within ...

CVE-2016-4884

CVE-2016-4884 is a CSRF vulnerability in baserCMS Blog plugin (version 3.0.10 and earlier). The issue allows a logged-in administrator to be forced into unintended operations via a malicious URL when the Blog plugin is enabled, enabling an attacker to hijack administrator actions. Affected produc...

CVE-2016-4881

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4886

CVE-2016-4886 is described in connected sources as a cross-site request forgery (CSRF) vulnerability affecting baserCMS with the Mail plugin (versions 3.0.10 and earlier). The underlying issue is CSRF when a logged-in administrator visits a malicious URL, which can force unintended administrative...

CVE-2016-4882

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4879

CVE-2016-4879 describes a Cross-site request forgery (CSRF) vulnerability in baserCMS and its Mail plugin (version 3.0.10 and earlier). The affected components are baserCMS core and plugins Mail, Blog, Feed, and Uploader (all 3.0.10 and earlier per JVN/NVD summaries). The vulnerability allows a l...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4879

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4886

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4876

CVE-2016-4876 is a CSRF vulnerability affecting baserCMS up to version 3.0.10 (and related plugins). An attacker could exploit a logged-in administrator session to cause arbitrary PHP code execution on the server via unspecified vectors, effectively hijacking admin actions. Impact ranges include ...

CVE-2016-4881

CVE-2016-4881 is a CSRF vulnerability affecting baserCMS when the Blog plugin (and related components) is enabled. The affected scope is baserCMS version 3.0.10 and earlier, including the Blog plugin version 3.0.10 and earlier. The root cause is cross-site request forgery that can allow a logged-...

CVE-2016-4877

CVE-2016-4877 is a stored cross-site scripting vulnerability affecting baserCMS and the Mail plugin (version 3.0.10 and earlier). The flaw allows a user in the Administrative group to insert arbitrary script or HTML that may execute in other administrative contexts. Root cause: insufficient input...

CVE-2016-4881: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4877: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4886: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4880: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4885: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4887: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4878: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...