Approved changes feed: RSS · Atom

cpe:2.3:a:basercms:basercms:3.0.10:*:*:*:*:*:*:*

part: a version: 3.0.10 update: *

VendorBasercms (07702311-5954-5ba8-aa45-bf97a51b4cf6)
ProductBasercms (afc919f1-859b-5353-bffe-4cb37c94abab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/baserproject/basercms purl2cpe 2026-06-01 10:16:33.817113

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-4887 vulnerable 2026-06-08 05:07:55.511425 Details available
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2017-05-12T18:00:00.000Z
Updated: 2024-08-06T00:46:39.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4886 vulnerable 2026-06-08 05:07:55.509805 Details available
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2017-05-12T18:00:00.000Z
Updated: 2024-08-06T00:46:39.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4885 vulnerable 2026-06-08 05:07:55.509395 Details available
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2017-05-12T18:00:00.000Z
Updated: 2024-08-06T00:46:39.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4884 vulnerable 2026-06-08 05:07:55.507561 Details available
Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2017-05-12T18:00:00.000Z
Updated: 2024-08-06T00:46:39.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4883 vulnerable 2026-06-08 05:07:55.507264 Details available
Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2017-05-12T18:00:00.000Z
Updated: 2024-08-06T00:46:39.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4882 vulnerable 2026-06-08 05:07:55.506955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4881 vulnerable 2026-06-08 05:07:55.506620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4880 vulnerable 2026-06-08 05:07:55.506224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4878 vulnerable 2026-06-08 05:07:55.502502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4877 vulnerable 2026-06-08 05:07:55.501046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4876 vulnerable 2026-06-08 05:07:55.500070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.