CVE-2019-10015

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BGSITENAME field in the optbase.inc.php file...

CVE-2019-9227

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

Code injection

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BGSITENAME parameter with malicious code can be written into the optbase.inc.php file...

CVE-2019-9227

CVE-2019-9227 affects baigo CMS 2.1.1 and enables remote code execution. The vulnerability stems from a BG_SITE_NAME parameter that can contain malicious code, which can be written into the opt_base.inc.php file. This leads to arbitrary code execution with remote access. Exploitation details are ...