BaserCMS Arbitrary PHP Code Execution Vulnerability

BaserCMS is an enterprise cms. An arbitrary PHP code execution vulnerability exists in libBaserModelThemeConfig.php in BaserCMS before 4.1.4, which can be exploited by remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter. code...

CVE-2018-18942

In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/themeconfigs/form dataThemeConfiglogo parameter...

PT-2018-14736

Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 4.1.4 Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved via the admin/theme configs/form data, specifically through the ThemeConfiglogo parameter in the...