Skip to content
OpenAdvisories

Archive

30 October 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.3

    Cross-Site Scripting in baserCMS

    baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit feed settings, Edit widget area, Sub site new registration, New category registration. Arbitrary JavaScript may be executed by entering speci…

  • High 7.7

    Cross Site Scripting in baserCMS

    baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comments. The issue affects the blog comment component. It is fixed in version 4.4.1.

  • High 7.2

    Remote Code Execution in baserCMS

    baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file. The Edit template component is vulnerable. The issue is fixed in…

  • High 7.7

    IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspectin…