Skip to content
OpenAdvisories

Archive

5 November 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2

    RCE in baserCMS before 4.1.4

    In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter.