Browse CVEs

HIGH 8.7 CVE-2020-15276 baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. Arbitrary JavaScript may be executed by entering a crafted nickname in blog comm… Basercms 4.4.1+ Fix from $1,9502020-10-30 HIGH 8.1 CVE-2020-15273 baserCMS before version 4.4.1 is vulnerable to Cross-Site Scripting. The issue affects the following components: Edit feed settings, Edit widget area… Basercms 4.4.1+ Fix from $1,9502020-10-30 HIGH 7.2 CVE-2020-15277 baserCMS before version 4.4.1 is affected by Remote Code Execution (RCE). Code may be executed by logging in as a system administrator and uploading … Basercms 4.4.1+ Fix from $1,9502020-10-30 HIGH 7.6 CVE-2020-15159 baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system … Basercms after 4.3.6 Fix from $1,9502020-08-28 HIGH 7.3 CVE-2020-15155 baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnera… Basercms after 4.3.6 Fix from $1,9502020-08-28 HIGH 7.3 CVE-2020-15154 baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) via arbitrary script execution. Admin access is required to exploit this vulnera… Basercms after 4.3.6 Fix from $1,9502020-08-28 HIGH 7.2 CVE-2018-18942 In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data… Basercms 4.1.4+ Fix from $1,9502018-11-05 MEDIUM 6.1 CVE-2018-0574 Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers … Basercms after 4.1.0.1 Fix from $1,6002018-06-26 MEDIUM 5.3 CVE-2018-0573 baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a con… Basercms after 4.1.0.1 Fix from $1,6002018-06-26 MEDIUM 5.3 CVE-2018-0575 baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail f… Basercms after 4.1.0.1 Fix from $1,6002018-06-26 HIGH 8.8 CVE-2018-0569 baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS … Basercms after 4.1.0.1 Fix from $1,9502018-06-26 HIGH 8.1 CVE-2018-0572 baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restric… Basercms after 4.1.0.1 Fix from $1,9502018-06-26 MEDIUM 5.4 CVE-2018-0570 Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authentica… Basercms after 4.1.0.1 Fix from $1,6002018-06-26 CRITICAL 9.8 CVE-2017-10842 SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspe… Basercms after 4.0.5 Fix from $2,3002017-08-29 HIGH 8.8 CVE-2017-10844 baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors. Basercms after 4.0.5 Fix from $1,9502017-08-29 HIGH 7.5 CVE-2017-10843 baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" fiel… Basercms after 4.0.5 Fix from $1,9502017-08-29 HIGH 8.8 CVE-2016-4876 Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of admini… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4878 Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of admini… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4879 Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authenticati… Basercms after 3.0.10 Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4881 Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authenticati… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4882 Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of admini… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4884 Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authenticati… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4885 Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authenticati… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4886 Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authenticati… Basercms Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2016-4887 Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authenti… Basercms Patch available Fix from $1,9502017-05-12 MEDIUM 5.4 CVE-2016-4877 Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web s… Basercms Patch available Fix from $1,6002017-05-12 MEDIUM 5.4 CVE-2016-4880 Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web s… Basercms Patch available Fix from $1,6002017-05-12 MEDIUM 5.4 CVE-2016-4883 Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecif… Basercms Patch available Fix from $1,6002017-05-12 MEDIUM 6.3 CVE-2015-7769 baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. Basercms Patch available Fix from $1,6002016-02-19 MEDIUM 6.5 CVE-2015-5641 SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Basercms after 3.0.7 Fix from $1,6002015-10-06