Basercms

Basercms

73 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2026-30880

  • EPSS 2.03%
  • Veröffentlicht 31.03.2026 00:44:39
  • Zuletzt bearbeitet 01.04.2026 20:27:00

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. This issue has been patched in version 5.2.3.

9.8

CVE-2026-27697

  • EPSS 0.41%
  • Veröffentlicht 31.03.2026 00:44:20
  • Zuletzt bearbeitet 01.04.2026 20:29:10

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3.

7.2

CVE-2026-21861

Exploit
  • EPSS 2.28%
  • Veröffentlicht 31.03.2026 00:43:58
  • Zuletzt bearbeitet 01.04.2026 20:29:39

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functionality. An authenticated administrator can execute arbitrary OS commands on the server due to impro...

7.2

CVE-2025-32957

Exploit
  • EPSS 0.58%
  • Veröffentlicht 31.03.2026 00:43:48
  • Zuletzt bearbeitet 01.04.2026 20:31:57

baserCMS is a website development framework. Prior to version 5.2.3, the application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using require_once without va...

5.4

CVE-2024-46998

  • EPSS 0.34%
  • Veröffentlicht 24.10.2024 19:15:14
  • Zuletzt bearbeitet 28.10.2024 15:32:34

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Edit Email Form Settings Feature. Version 5.1.2 fixes the issue.

5.4

CVE-2024-46996

  • EPSS 0.31%
  • Veröffentlicht 24.10.2024 19:15:14
  • Zuletzt bearbeitet 28.10.2024 15:31:43

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Blog posts feature. Version 5.1.2 fixes this issue.

6.1

CVE-2024-46995

  • EPSS 0.33%
  • Veröffentlicht 24.10.2024 19:15:14
  • Zuletzt bearbeitet 28.10.2024 15:33:01

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in HTTP 400 Bad Request. Version 5.1.2 fixes this issue.

5.4

CVE-2024-46994

  • EPSS 0.29%
  • Veröffentlicht 24.10.2024 19:15:13
  • Zuletzt bearbeitet 28.10.2024 15:30:10

baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in Blog posts and Contents list Feature. Version 5.1.2 fixes this issue.

5.4

CVE-2024-26128

  • EPSS 0.57%
  • Veröffentlicht 22.02.2024 19:15:09
  • Zuletzt bearbeitet 20.12.2024 19:30:47

baserCMS is a website development framework. Prior to version 5.0.9, there is a cross-site scripting vulnerability in the content management feature. Version 5.0.9 contains a fix for this vulnerability.

8.1

CVE-2023-51450

  • EPSS 1.46%
  • Veröffentlicht 22.02.2024 15:15:08
  • Zuletzt bearbeitet 18.12.2024 16:55:17

baserCMS is a website development framework. Prior to version 5.0.9, there is an OS Command Injection vulnerability in the site search feature of baserCMS. Version 5.0.9 contains a fix for this vulnerability.