Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
basercms basercms vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2018-0574
Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and previous versions versions, baserCMS 3.0.15 and previous versions versions) allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Basercms Basercms
5
CVSSv2
CVE-2018-0575
baserCMS (baserCMS 4.1.0.1 and previous versions versions, baserCMS 3.0.15 and previous versions versions) allows remote malicious users to bypass access restriction in mail form to view a file which is uploaded by a site user via unspecified vectors.
Basercms Basercms
6.5
CVSSv2
CVE-2015-5641
SQL injection vulnerability in baserCMS prior to 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Basercms Basercms
NA
CVE-2023-43647
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in the file upload feature of baserCMS. Version 4.8.0 contains a patch for this issue.
Basercms Basercms
NA
CVE-2023-43648
baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the form submission data management feature of baserCMS. Version 4.8.0 contains a patch for this issue.
Basercms Basercms
NA
CVE-2023-43649
baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability in the content preview feature of baserCMS. Version 4.8.0 contains a patch for this issue.
Basercms Basercms
NA
CVE-2023-43792
baserCMS is a website development framework. In versions 4.6.0 up to and including 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.
Basercms Basercms
3.5
CVSSv2
CVE-2021-20681
Improper neutralization of JavaScript input in the page editing function of baserCMS versions before 4.4.5 allows remote authenticated malicious users to inject an arbitrary script via unspecified vectors.
Basercms Basercms
9
CVSSv2
CVE-2021-20682
baserCMS versions before 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.
Basercms Basercms
3.5
CVSSv2
CVE-2021-20683
Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions before 4.4.5 allows remote authenticated malicious users to inject an arbitrary script via unspecified vectors.
Basercms Basercms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-52710
arbitrary
CVE-2024-5272
CVE-2024-2961
brute force
remote
CVE-2024-32944
CVE-2024-36241
CVE-2024-5274
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »