Skip to content
OpenAdvisories
Unscored CVE-2016-4876 EUVD-2016-5856GHSA-r75x-rc5q-788v

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication…

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors.

Affected products

VendorProductAffectedFixed
baserCMS Users Community baserCMS version 3.0.10 and earlier —

References