RCE in baserCMS before 4.1.4

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-18942 · ADVISORY
• baserproject/basercms · WEB
• web.archive.org/web/20200130073341/https://basercms.net/release/4_1_4 · WEB
• web.archive.org/web/20211209034642/http://sunu11.com/2018/10/31/baserCMS · WEB
• sunu11.com/2018/10/31/baserCMS · Exploit
• basercms.net/release/4_1_4 · Release Notes

baserproject/basercms のその他の脆弱性

• CVE-2026-32734中 6.1baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue…
• CVE-2026-30940高 7.2baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API …
• CVE-2026-30880緊急 9.8baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. Th…
• CVE-2026-30879中 6.1baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This i…
• CVE-2026-30878中 5.3baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mai…