Skip to content
Noroxi

basercms records

68 published records for vendor basercms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
72.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

68 records
  • CVE-2017-10842
    40Plan

    SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands

    CriticalCVSS 9.8No exploitEPSS 2%

    basercms · basercmsAug 28, 2017

  • CVE-2023-25654
    39Monitor

    baserCMS File Uploader Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    basercms · basercmsMar 23, 2023

  • CVE-2023-25655
    39Monitor

    baserCMS allows any file to be uploaded

    CriticalCVSS 9.8No exploitEPSS 1%

    basercms · basercmsMar 23, 2023

  • CVE-2023-43792
    39Monitor

    baserCMS Code Injection Vulnerability in Mail Form Feature

    CriticalCVSS 9.8No exploitEPSS 1%

    basercms · basercmsOct 30, 2023

  • CVE-2023-43649
    39Monitor

    baserCMS CSRF vulnerability in Content preview Feature

    CriticalCVSS 9.8No exploitEPSS 0%

    basercms · basercmsOct 30, 2023

  • CVE-2026-30880
    37Monitor

    baserCMS: OS command injection vulnerability in installer

    CriticalCVSS 9.2No exploitEPSS 2%

    basercms · basercmsMar 30, 2026

  • CVE-2021-41243
    36Monitor

    OS Command Injection Vulnerability and Potential Zip Slip Vulnerability

    HighCVSS 8.8No exploitEPSS 2%

    basercms · basercmsNov 26, 2021

  • CVE-2021-41279
    35Monitor

    Zip Slip Vulnerability in BaserCMS

    HighCVSS 8.8No exploitEPSS 2%

    basercms · basercmsNov 26, 2021

  • CVE-2018-0569
    35Monitor

    baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbi

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsJun 26, 2018

  • CVE-2017-10844
    35Monitor

    baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsAug 28, 2017

  • CVE-2016-4881
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the aut

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4878
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4884
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the aut

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4882
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4887
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4886
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the aut

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4885
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the aut

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4876
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2016-4879
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the aut

    HighCVSS 8.8No exploitEPSS 1%

    basercms · basercmsMay 12, 2017

  • CVE-2020-15276
    34Monitor

    Cross Site Scripting in baserCMS

    HighCVSS 8.7No exploitEPSS 1%

    basercms · basercmsOct 30, 2020

  • CVE-2018-0572
    32Monitor

    baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass acces

    HighCVSS 8.1No exploitEPSS 2%

    basercms · basercmsJun 26, 2018

  • CVE-2023-51450
    32Monitor

    baserCMS OS command injection vulnerability in Installer

    HighCVSS 8.1No exploitEPSS 1%

    basercms · basercmsFeb 22, 2024

  • CVE-2020-15273
    32Monitor

    Cross-Site Scripting in baserCMS

    HighCVSS 8.1No exploitEPSS 1%

    basercms · basercmsOct 30, 2020

  • CVE-2020-15159
    31Monitor

    Cross Site Scripting leading to RCE in baserCMS

    HighCVSS 7.6No exploitEPSS 2%

    basercms · basercmsAug 28, 2020

  • CVE-2017-10843
    30Monitor

    baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "F

    HighCVSS 7.5No exploitEPSS 1%

    basercms · basercmsAug 28, 2017