1009 matches found
CVE-2016-1169: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
BaserCMS password brute force vulnerability
baserCMS is an enterprise-level content management system CMS. An arbitrary command execution vulnerability exists in baserCMS versions 3.0.2 through 3.0.8 that could allow an authenticated, remote user to execute arbitrary operating system commands via unspecified vectors...
Design/Logic Flaw
baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2015-7769
baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2015-7769
baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
CVE-2015-7769
CVE-2015-7769 affects baserCMS 3.0.2–3.0.8, where an authenticated, remote user can execute arbitrary operating-system commands via unspecified vectors (OS command injection, CWE-78). The JVN records and CNVD/NVD entries confirm the vulnerable range and project, noting the impact as arbitrary com...
baserCMS vulnerable to OS command injection
Overview baserCMS is an open-source Contents Management System CMS. baserCMS contains an OS command injection vulnerability CWE-78. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary OS...
JVN#69854312: baserCMS vulnerable to OS command injection
baserCMS is an open-source Contents Management System CMS. baserCMS contains an OS command injection vulnerability CWE-78. Impact An arbitrary OS command may be executed on the server by a logged in attacker. Solution Update the Software Update to the latest version according to the information...
CVE-2015-7769: Improper Neutralization of Special Elements used in an OS Command
baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors...
PT-2016-3830
Name of the Vulnerable Software and Affected Versions baserCMS versions 3.0.2 through 3.0.8 Description The issue allows remote authenticated users to execute arbitrary OS commands. Recommendations For versions 3.0.2 through 3.0.8, update to a version outside of this range to resolve the issue...
CVE-2015-5641
SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-5640
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request...
Sql injection
SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Cross site request forgery (csrf)
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request...
CVE-2015-5641
The CVE-2015-5641 entry affects baserCMS prior to 3.0.8, where an authenticated user can inject arbitrary SQL statements (CWE-89) via unspecified vectors. Impact is that a logged-in attacker may execute arbitrary SQL commands against the database. Affected versions include 3.0.0 through 3.0.7; th...
CVE-2015-5640
baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request...
CVE-2015-5640
CVE-2015-5640 relates to baserCMS prior to 3.0.8. Multiple connected sources confirm a vulnerability where a logged-in, authenticated user can modify arbitrary user settings by sending a specially crafted request, effectively an access-control bypass. The impact described across advisories is tha...
CVE-2015-5641
SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
PT-2015-7003
Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 3.0.8 Description The issue allows remote authenticated users to modify arbitrary user settings via a crafted request. Recommendations For versions prior to 3.0.8, update to version 3.0.8 or later to resolve the issu...