baserCMS 1.5.8
Approved changes feed: RSS · Atom
cpe:2.3:a:basercms:basercms:1.5.8:*:*:*:*:*:*:*
part: a version: 1.5.8 update: *
| Vendor | Basercms (07702311-5954-5ba8-aa45-bf97a51b4cf6) |
|---|---|
| Product | Basercms (afc919f1-859b-5353-bffe-4cb37c94abab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/baserproject/basercms |
purl2cpe | 2026-06-01 10:16:33.817052 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-1248 |
vulnerable | 2026-06-08 05:00:48.396910 |
Details available
app/config/core.php in baserCMS 1.6.15 and earlier does not properly handle installations in shared-hosting environments, which allows remote attackers to hijack sessions by leveraging administrative access to a different domain.
Published: 2012-05-15T20:00:00.000Z
Updated: 2024-08-06T18:53:36.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2674 |
vulnerable | 2026-06-08 04:58:08.365423 |
Details available
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
Published: 2011-10-02T01:00:00.000Z
Updated: 2024-09-17T01:31:21.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2673 |
vulnerable | 2026-06-08 04:58:08.352865 |
Details available
Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-10-02T01:00:00.000Z
Updated: 2024-09-16T19:41:41.596Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.