baserproject/basercms

56 results · Feed

• Medium 5.3
  CVE-2018-0575

  Sensitive Data Exposure in baserCMS

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• Medium 5.4
  CVE-2018-0570

  XSS in baserCMS

  Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• Medium 6.1
  CVE-2018-0574

  XSS in baserCMS

  Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• Medium 5.3
  CVE-2018-0573

  baserCMS Access Control Bypass

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is uploaded by a site user via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• High 8.1
  CVE-2018-0572

  baserCMS vulnerable to Access Control Bypass

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• Medium 4.3
  CVE-2018-0571

  baserCMS arbitrary file upload vulnerability

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• High 8.8
  CVE-2018-0569

  OS Command Injection in baserCMS

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• Critical 9.8
  CVE-2017-10842

  baserCMS SQL Injection vulnerability

  SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Aug 28, 2017
• High 7.5
  CVE-2017-10843

  Arbitrary file delete in baserCMS

  baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Aug 28, 2017
• High 8.8
  CVE-2017-10844

  Code Injection in baserCMS

  baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.

  baserproject/basercms Packagist
  Aug 28, 2017
• High 8.8
  CVE-2016-4879

  CSRF in baserCMS 3.0.10 and earlier

  Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

  baserCMS Users Community baserCMS plugin Mail baserproject/basercms Packagist
  May 12, 2017
• High 8.8
  CVE-2016-4881

  CSRF in baserCMS 3.0.10 and earlier

  Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

  baserCMS Users Community baserCMS plugin Blog baserproject/basercms Packagist
  May 12, 2017
• High 8.8
  CVE-2016-4878

  baserCMS Cross Site Request Forgery vulnerability

  Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  May 12, 2017
• Medium 5.4
  CVE-2016-4880

  baserCMS Cross-site Scripting vulnerability

  Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

  baserCMS Users Community baserCMS plugin Blog baserproject/basercms Packagist
  May 12, 2017
• Medium —
  CVE-2015-5640

  baserCMS Access Control Bypass

  baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

  baserproject/basercms Packagist
  Oct 3, 2015
• Medium —
  CVE-2011-2674

  BaserCMS privilege escallation

  BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

  baserproject/basercms Packagist
  Oct 2, 2011