CVE-2017-10843

The CVE-2017-10843 issue affects baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. Affected component is the mail form’s File field, which allows an remote attacker to delete arbitrary files on the system via unspecified vectors. The root cause is described in connected advisories as an...

CVE-2017-10842

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-10844

CVE-2017-10844 affects baserCMS 3.0.14 and earlier and 4.0.5 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code on the server via unspecified vectors. Reported CVSS scores indicate high impact (CVSS3 base 8.8; CVSS2 base 6.5). Connected sources corroborate that the is...

CVE-2017-10842

SQL injection vulnerability in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected product: baserCMS. Root cause: SQL injection in the application input handling (vectors not specified in the provid...

CVE-2017-10844

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors...

BaserCMS Directory Traversal Vulnerability

baserCMS is an enterprise-level content management system CMS. A directory traversal vulnerability exists in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. A remote attacker can exploit this vulnerability to obtain or delete arbitrary files on the system...

baserCMS SQL Injection Vulnerability

baserCMS is an enterprise-level content management system CMS. A SQL injection vulnerability exists in baserCMS versions 3.0.14 and earlier and 4.0.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands, create files, and obtain or change information in...

Multiple vulnerabilities in baserCMS

Overview baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2017-10842 Arbitary files may be deleted - CVE-2017-10843 Arbitary PHP code execution - CVE-2017-10844 Shoji Baba reported the vulnerabilities to IPA. JPCERT/CC...

JVN#78151490: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2017-10842 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 7.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:P/A:P| Base Score: 7.5...

CVE-2016-4880

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4884

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4881

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4884

Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4887

Cross-site request forgery CSRF vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4879

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4886

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...