CVE-2018-0569

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0571

CVE-2018-0571 affects baserCMS 4.1.0.1 and earlier, where a site-operator with login privileges can upload arbitrary files via the upload file management function. The connected advisories corroborate that the vulnerability allows unrestricted file upload under authenticated conditions, enabling ...

CVE-2018-0574

CVE-2018-0574 is a cross-site scripting vulnerability in baserCMS (affected: 4.1.0.1 and earlier; 3.0.15 and earlier). The attack surface is the theme management function, with vectors not publicly disclosed in the provided description. Impact: remote attackers can inject arbitrary web script or ...

CVE-2018-0569

Summary : CVE-2018-0569 affects baserCMS up to 4.1.0.1 and 3.0.15 and earlier. It is a command-injection vulnerability allowing remote authenticated attackers to execute arbitrary OS commands via unspecified vectors, with impact described as remote code execution under certain privileges. The iss...

PT-2018-8933

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description The issue allows remote attackers to bypass access restrictions in the mail form, enabling them to view files uploaded by site users. Recommendations For...

CVE-2018-0575: Exposure of Sensitive Information to an Unauthorized Actor

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0569: Improper Neutralization of Special Elements used in an OS Command

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0574: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0573: Improper Privilege Management

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors...

CVE-2018-0571: Unrestricted Upload of File with Dangerous Type

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote attackers with a site operator privilege to upload arbitrary files...

CVE-2018-0570: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8929

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description The issue allows remote attackers with site operator privilege to upload arbitrary files. Recommendations For versions 4.1.0.1 and earlier, update to a...

CVE-2018-0572: Undefined Security Weakness

baserCMS baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors...

PT-2018-8928

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For versions 4.1.0.1 and earlier,...

PT-2018-8930

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description The issue allows remote authenticated attackers to bypass access restrictions, enabling them to view or alter restricted content. Recommendations For versio...

PT-2018-8932

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 4.1.0.1 an...

PT-2018-8931

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description The issue allows remote attackers to bypass access restrictions for content, enabling them to view files uploaded by site users. The attack vector is not...

PT-2018-8927

Name of the Vulnerable Software and Affected Versions baserCMS versions 4.1.0.1 and earlier baserCMS versions 3.0.15 and earlier Description The issue allows remote authenticated attackers to execute arbitrary OS commands. Recommendations For versions 4.1.0.1 and earlier, update to a version late...

Multiple vulnerabilities in baserCMS

Overview baserCMS provided by baserCMS Users Community is an opensource content management system. baserCMS contains multiple vulnerabilities listed below. Command injection CWE-94 - CVE-2018-0569 Cross-site scripting CWE-79 - CVE-2018-0570 Unrestricted Upload of File with Dangerous Type in uploa...

BaserCMS Restricted Access Vulnerability

baserCMS is an enterprise-level content management system CMS. A restricted access vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. A remote attacker can use this vulnerability to bypass access...