CSRF in baserCMS 3.0.10 and earlier

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-4879 · ADVISORY
• jvn.jp/en/jp/JVN92765814/index.html · WEB
• web.archive.org/web/20210308130052/http://www.securityfocus.com/bid/93217 · WEB
• basercms.net/security/JVN92765814 · WEB
• securityfocus.com/bid/93217 · Third Party Advisory

Mais vulnerabilidades de baserproject/basercms

• CVE-2026-32734MÉDIO 6.1baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has DOM-based cross-site scripting in tag creation. This issue…
• CVE-2026-30940ALTO 7.2baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API …
• CVE-2026-30880CRÍTICO 9.8baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has an OS command injection vulnerability in the installer. Th…
• CVE-2026-30879MÉDIO 6.1baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a cross-site scripting vulnerability in blog posts. This i…
• CVE-2026-30878MÉDIO 5.3baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mai…