CVE-2011-2674

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2011-2674

CVE-2011-2674 affects BaserCMS prior to 1.6.12. The issue is an access-control bug where adding a user to the default operators group does not properly restrict privileges, allowing remote authenticated users to escalate privileges. Affected versions include BaserCMS 1.6.11.4 and earlier. Root ca...