https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T10:59:36.806616+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-24388 cnvd-2017-24388 2026-10-27T10:59:36.896040+00:00 cnvd-2017-24388 https://cve.radiocsirt.org/vuln/euvd-2026-76424 EUVD-2026-76424 2026-10-27T10:59:36.896117+00:00 EUVD-2026-76424 https://cve.radiocsirt.org/vuln/fkie_cve-2017-10843 fkie_cve-2017-10843 2026-10-27T10:59:36.896133+00:00

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.

 https://cve.radiocsirt.org/vuln/ghsa-x73x-7gmx-w835 GHSA-x73x-7gmx-w835 — Arbitrary file delete in baserCMS 2026-10-27T10:59:36.896160+00:00

Affected: Packagist: baserproject/basercms

baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail form.

 https://cve.radiocsirt.org/vuln/gsd-2017-10843 gsd-2017-10843 2026-10-27T10:59:36.896185+00:00 gsd-2017-10843 https://cve.radiocsirt.org/vuln/jvndb-2017-000203 jvndb-2017-000203 2026-10-27T10:59:36.896197+00:00

baserCMS provided by baserCMS Users Community contains multiple vulnerabilities listed below. * SQL injection (CWE-89) - CVE-2017-10842 * Arbitary files may be deleted - CVE-2017-10843 * Arbitary PHP code execution - CVE-2017-10844 Shoji Baba reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.