BaserCMS Arbitrary PHP Code Execution Vulnerability

BaserCMS is an enterprise cms. An arbitrary PHP code execution vulnerability exists in libBaserModelThemeConfig.php in BaserCMS before 4.1.4, which can be exploited by remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter. code...

CVE-2018-18942

In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...