Lucene search
BagesoftBagecms
2 matches found
CVE-2018-19104
In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
8.8CVSS8.7AI score0.00459EPSS
CVE-2018-19560
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
9.3CVSS8.5AI score0.0015EPSS