Critical · 9.8 CVE-2017-10842 EUVD-2022-4327GHSA-jc94-wp59-pq4f

baserCMS SQL Injection vulnerability

Published Aug 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: baserCMS Users Community Product: BaserCMS Package: baserproject/basercms Ecosystem: Packagist

Description

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
baserCMS Users Community	baserCMS	3.0.14 and earlier, 4.0.5 and earlier	—

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	baserproject/basercms	< 3.0.15	3.0.15	GHSA-jc94-wp59-pq4f
Packagist	baserproject/basercms	>= 4.0.0, < 4.0.6	4.0.6	GHSA-jc94-wp59-pq4f

References

https://basercms.net/security/JVN78151490
JVN#78151490 third-party-advisory