Skip to content
OpenAdvisories

Package · Packagist

badaso/core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2025-52353

    Badaso CMS file upload vulnerability

    An arbitrary code execution vulnerability in Badaso CMS 2.9.11. The Media Manager allows authenticated users to upload files containing embedded PHP code via the file-upload endpoint, bypassing content-type validation. When such a file is accessed via its URL…

    badaso/core Packagist
  • Critical 9.8
    CVE-2022-41705

    Badaso vulnerable to Remote Code Execution (RCE)

    Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

    badaso/core Packagist
  • Critical 9.8
    CVE-2022-41711

    Badaso vulnerable to Remote Code Execution via malicious file upload

    Badaso version 2.6.0 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server. This is possible because the application does not properly validate the data uploaded by users.

    badaso/core Packagist