Description
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.
Unscored
CVE-2019-10015
EUVD-2019-2079GHSA-v2p2-mj8c-jjfr
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, becau…
Published Mar 24, 2019 · Updated Aug 4, 2024 · Assigned by mitre