basercms kayıtları

basercms üreticisine ait 68 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 6
Düzeltme kaydı olan: %72,1
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

68 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2017-10842İstismar yok	SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands basercms · basercms · CWE-89 pre-auth RCE SQL enjeksiyonu	Kritik9,8	—	%1,8	28 Ağu 2017
39İzleyin	CVE-2023-25654İstismar yok	baserCMS File Uploader Remote Code Execution (RCE) vulnerabilitybasercms · basercms · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%1,5	23 Mar 2023
39İzleyin	CVE-2023-25655İstismar yok	baserCMS allows any file to be uploadedbasercms · basercms · CWE-434 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%1,1	23 Mar 2023
39İzleyin	CVE-2023-43792İstismar yok	baserCMS Code Injection Vulnerability in Mail Form Featurebasercms · basercms · CWE-94 pre-auth RCE	Kritik9,8	—	%0,6	30 Eki 2023
39İzleyin	CVE-2023-43649İstismar yok	baserCMS CSRF vulnerability in Content preview Featurebasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Kritik9,8	—	%0,3	30 Eki 2023
37İzleyin	CVE-2026-30880İstismar yok	baserCMS: OS command injection vulnerability in installerbasercms · basercms · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,2	—	%2,2	30 Mar 2026
36İzleyin	CVE-2021-41243İstismar yok	OS Command Injection Vulnerability and Potential Zip Slip Vulnerabilitybasercms · basercms · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%2,2	26 Kas 2021
35İzleyin	CVE-2021-41279İstismar yok	Zip Slip Vulnerability in BaserCMSbasercms · basercms · CWE-22 Yol geçişi	Yüksek8,8	—	%1,6	26 Kas 2021
35İzleyin	CVE-2018-0569İstismar yok	baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbibasercms · basercms · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,5	26 Haz 2018
35İzleyin	CVE-2017-10844İstismar yok	baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.basercms · basercms · CWE-94 RCE	Yüksek8,8	—	%1,5	28 Ağu 2017
35İzleyin	CVE-2016-4881İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the autbasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4878İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication basercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4884İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the autbasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4882İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication basercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4887İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack thebasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4886İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the autbasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4885İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the autbasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4876İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication basercms · basercms · CWE-352 pre-auth RCE CSRF	Yüksek8,8	—	%0,9	12 May 2017
35İzleyin	CVE-2016-4879İstismar yok	Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the autbasercms · basercms · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,9	12 May 2017
34İzleyin	CVE-2020-15276İstismar yok	Cross Site Scripting in baserCMSbasercms · basercms · CWE-79 XSS	Yüksek8,7	—	%1,0	30 Eki 2020
32İzleyin	CVE-2018-0572İstismar yok	baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass accesbasercms · basercms	Yüksek8,1	—	%1,6	26 Haz 2018
32İzleyin	CVE-2023-51450İstismar yok	baserCMS OS command injection vulnerability in Installerbasercms · basercms · CWE-78 pre-auth RCE Komut enjeksiyonu	Yüksek8,1	—	%1,5	22 Şub 2024
32İzleyin	CVE-2020-15273İstismar yok	Cross-Site Scripting in baserCMSbasercms · basercms · CWE-79 XSS	Yüksek8,1	—	%1,0	30 Eki 2020
31İzleyin	CVE-2020-15159İstismar yok	Cross Site Scripting leading to RCE in baserCMSbasercms · basercms · CWE-79 RCE XSS	Yüksek7,6	—	%2,2	28 Ağu 2020
30İzleyin	CVE-2017-10843İstismar yok	baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "Fbasercms · basercms Kimlik doğrulamasız	Yüksek7,5	—	%1,4	28 Ağu 2017

CVE-2017-10842
40Planlayın
SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- SQL enjeksiyonu
basercms · basercms28 Ağu 2017
CVE-2023-25654
39İzleyin
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
- Dosya yükleme
basercms · basercms23 Mar 2023
CVE-2023-25655
39İzleyin
baserCMS allows any file to be uploaded
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Dosya yükleme
basercms · basercms23 Mar 2023
CVE-2023-43792
39İzleyin
baserCMS Code Injection Vulnerability in Mail Form Feature
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
basercms · basercms30 Eki 2023
CVE-2023-43649
39İzleyin
baserCMS CSRF vulnerability in Content preview Feature
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
basercms · basercms30 Eki 2023
CVE-2026-30880
37İzleyin
baserCMS: OS command injection vulnerability in installer
KritikCVSS 9,2İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
basercms · basercms30 Mar 2026
CVE-2021-41243
36İzleyin
OS Command Injection Vulnerability and Potential Zip Slip Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Komut enjeksiyonu
basercms · basercms26 Kas 2021
CVE-2021-41279
35İzleyin
Zip Slip Vulnerability in BaserCMS
YüksekCVSS 8,8İstismar yokEPSS %2
- Yol geçişi
basercms · basercms26 Kas 2021
CVE-2018-0569
35İzleyin
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbi
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
basercms · basercms26 Haz 2018
CVE-2017-10844
35İzleyin
baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
basercms · basercms28 Ağu 2017
CVE-2016-4881
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the aut
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4878
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4884
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the aut
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4882
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4887
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4886
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the aut
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4885
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the aut
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2016-4876
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- CSRF
basercms · basercms12 May 2017
CVE-2016-4879
35İzleyin
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the aut
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
basercms · basercms12 May 2017
CVE-2020-15276
34İzleyin
Cross Site Scripting in baserCMS
YüksekCVSS 8,7İstismar yokEPSS %1
- XSS
basercms · basercms30 Eki 2020
CVE-2018-0572
32İzleyin
baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass acces
YüksekCVSS 8,1İstismar yokEPSS %2
basercms · basercms26 Haz 2018
CVE-2023-51450
32İzleyin
baserCMS OS command injection vulnerability in Installer
YüksekCVSS 8,1İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
basercms · basercms22 Şub 2024
CVE-2020-15273
32İzleyin
Cross-Site Scripting in baserCMS
YüksekCVSS 8,1İstismar yokEPSS %1
- XSS
basercms · basercms30 Eki 2020
CVE-2020-15159
31İzleyin
Cross Site Scripting leading to RCE in baserCMS
YüksekCVSS 7,6İstismar yokEPSS %2
- RCE
- XSS
basercms · basercms28 Ağu 2020
CVE-2017-10843
30İzleyin
baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "F
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
basercms · basercms28 Ağu 2017