CVE-2020-15277 Remote Code Execution in baserCMS

baserCMS before version 4.4.1 is affected by Remote Code Execution RCE. Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in version 4.4.1...

CVE-2020-15277

CVE-2020-15277 affects baserCMS prior to 4.4.1. The Edit template component is vulnerable to Remote Code Execution when a system administrator uploads an executable script (e.g., PHP) through the impacted path. This allows code execution with the privileges of the admin account. The issue is fixe...