BaserCMS

6 results · Clear filters · Feed

• High 7.1
  CVE-2026-65875

  BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and open…

  baserCMS Users Community BaserCMS
  Aug 3, 2026
• High 7.2
  CVE-2021-20682

  OS Command Injection in baserCMS

  baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Mar 26, 2021
• High 8.1
  CVE-2018-0572

  baserCMS vulnerable to Access Control Bypass

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restricted content via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• High 8.8
  CVE-2018-0569

  OS Command Injection in baserCMS

  baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Jun 26, 2018
• High 7.5
  CVE-2017-10843

  Arbitrary file delete in baserCMS

  baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  Aug 28, 2017
• High 8.8
  CVE-2016-4878

  baserCMS Cross Site Request Forgery vulnerability

  Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

  baserCMS Users Community BaserCMS baserproject/basercms Packagist
  May 12, 2017