CVE-2018-0572

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Privilege escalation

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-0569

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

Design/Logic Flaw

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

Authentication flaw

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0569

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0575

CVE-2018-0575 affects baserCMS 4.1.0.1 and earlier, and 3.0.15 and earlier. The vulnerability allows remote attackers to bypass access restrictions in the mail form and view files uploaded by a site user via unspecified vectors. Connected sources confirm multiple vulnerabilities in baserCMS with ...

CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-0570

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0570

CVE-2018-0570 is an XSS vulnerability in baserCMS affecting baserCMS 4.1.0.1 and earlier and 3.0.15 and earlier. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details from multiple sources indicate that a site operator login...

CVE-2018-0573

The CVE-2018-0573 issue affects baserCMS versions 4.1.0.1 and earlier, and 3.0.15 and earlier, enabling a remote attacker to bypass access restrictions and view files uploaded by a site user due to a failure to restrict access (CWE-264). Multiple sources (NVD, JVN, GHSA, OSV, CNVD) consistently d...

CVE-2018-0572

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors...

CVE-2018-0573

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0573

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0572

CVE-2018-0572 affects baserCMS 4.1.0.1 and earlier, and 3.0.15 and earlier. The vulnerability is an access control bypass in the contents management function that could let remote authenticated attackers view or alter restricted content via unspecified vectors. The connected advisories corroborat...

CVE-2018-0574

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0575

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0571

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...