Most recent entries from all

EUVD-2026-180120

fkie_cve-2011-2674

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

GHSA-6wr6-54mw-mvhr — BaserCMS privilege escallation

Affected: Packagist: baserproject/basercms

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

gsd-2011-2674

jvndb-2011-000066

BaserCMS contains a vulnerability in access restriction. BaserCMS is an open-source Contents Management System (CMS). BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.