CVE-2016-4887

Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4887

CVE-2016-4887 is a CSRF vulnerability affecting baserCMS and its Uploader plugin. Restated details from multiple sources show that when the Uploader plugin is enabled and an administrative user visits a malicious URL, the attacker could cause unintended administrative operations (e.g., file delet...

CVE-2016-4885

Cross-site request forgery CSRF vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2017-8577

Name of the Vulnerable Software and Affected Versions baserCMS plugin Blog versions 3.0.10 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For versions 3.0.10 and earlier, update to a version later...

PT-2017-8578

Name of the Vulnerable Software and Affected Versions baserCMS plugin Blog versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. Recommendations For versions 3.0.10 and earlier, update to a version...

PT-2017-8581

Name of the Vulnerable Software and Affected Versions baserCMS plugin Blog versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For versions 3.0.10 and earlie...

PT-2017-8584

Name of the Vulnerable Software and Affected Versions baserCMS plugin Uploader versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. Recommendations For baserCMS plugin Uploader versions 3.0.10 and...

PT-2017-8582

Name of the Vulnerable Software and Affected Versions baserCMS plugin Feed versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. This is achieved via unspecified vectors. Recommendations For baserCMS...

baserCMS plugin "Recruit Plugin" vulnerable to cross-site request forgery

Overview baserCMS plugin "Recruit Plugin" contains a cross-site request forgery vulnerability. CWE-352 Takaesu Isao of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...