CVE-2012-1248

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain...

CVE-2012-1248

The CVE affects baserCMS 1.6.15 and earlier, where the vulnerability resides in app/config/core.php. In shared-hosting environments, installations may not be properly segregated, enabling an attacker with admin access on one domain to hijack sessions on another domain. This is a session managemen...

baserCMS vulnerable to session management

Overview baserCMS contains a vulnerability in session management. baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability in session management. Impact If a web server is hosting several websites, and baserCMS are installed on the respective websites, an...

JVN#53465692: baserCMS vulnerable to session management

baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability in session management. Impact If a web server is hosting several websites, and baserCMS are installed on the respective websites, an administrator of a baserCMS can access baserCMS instance of the other...

PT-2012-3165

Name of the Vulnerable Software and Affected Versions baserCMS versions 1.6.15 and earlier Description The issue arises from improper handling of installations in shared-hosting environments, allowing remote attackers to hijack sessions by leveraging administrative access to a different domain...

CVE-2012-1248: Undefined Security Weakness

app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain...

CVE-2011-2673

Cross-site scripting XSS vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2674

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2011-2674

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2011-2673

CVE-2011-2673 corresponds to a cross-site scripting (XSS) vulnerability in BaserCMS prior to 1.6.13.2. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected software is BaserCMS, with versions up to 1.6.13.1 explicitly mentioned; the vulnerabil...

CVE-2011-2674

CVE-2011-2674 affects BaserCMS prior to 1.6.12. The issue is an access-control bug where adding a user to the default operators group does not properly restrict privileges, allowing remote authenticated users to escalate privileges. Affected versions include BaserCMS 1.6.11.4 and earlier. Root ca...

CVE-2011-2673

Cross-site scripting XSS vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-4017

Name of the Vulnerable Software and Affected Versions BaserCMS versions prior to 1.6.13.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.6.13.2, update to version 1.6.13.2 or later to resolve the...

PT-2011-4018

Name of the Vulnerable Software and Affected Versions BaserCMS versions prior to 1.6.12 Description The issue allows remote authenticated users to gain privileges due to improper restrictions on additions to the membership of the operators group. Recommendations For versions prior to 1.6.12, upda...

CVE-2011-2673: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2674: Undefined Security Weakness

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

BaserCMS vulnerable to access restriction

Overview BaserCMS contains a vulnerability in access restriction. BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Masako Ohn...

JVN#16617002: BaserCMS vulnerable to access restriction

BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Impact Users without administrative privileges may obtain administrative...