Vulnerabilities > CVE-2020-15159 - Unspecified vulnerability in Basercms

CVSS 7.6 - HIGH

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

high complexity

basercms

NVD

Published: 2020-08-28

Updated: 2024-11-21

Summary

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting (XSS) and Remote Code Execution (RCE). This may be executed by logging in as a system administrator and uploading an executable script file such as a PHP file.The affected components are ThemeFilesController.php and UploaderFilesController.php. This is fixed in version 4.3.7.

Vulnerable Configurations

Part	Description	Count
Application	Basercms Basercms Basercms - Basercms Basercms 1.5.4 Basercms Basercms 1.5.5 Basercms Basercms 1.5.6 Basercms Basercms 1.5.7 Basercms Basercms 1.5.8 Basercms Basercms 1.5.9 Basercms Basercms 1.6.0 Basercms Basercms 1.6.1 Basercms Basercms 1.6.2 Basercms Basercms 1.6.3 Basercms Basercms 1.6.4 Basercms Basercms 1.6.5 Basercms Basercms 1.6.6 Basercms Basercms 1.6.7 Basercms Basercms 1.6.7.1 Basercms Basercms 1.6.8 Basercms Basercms 1.6.9 Basercms Basercms 1.6.9.1 Basercms Basercms 1.6.10 Basercms Basercms 1.6.11 Basercms Basercms 1.6.11.1 Basercms Basercms 1.6.11.2 Basercms Basercms 1.6.11.3 Basercms Basercms 1.6.11.4 Basercms Basercms 1.6.12 Basercms Basercms 1.6.13 Basercms Basercms 1.6.13.1 Basercms Basercms 1.6.13.2 Basercms Basercms 1.6.13.3 Basercms Basercms 1.6.13.4 Basercms Basercms 1.6.13.5 Basercms Basercms 1.6.13.6 Basercms Basercms 1.6.14 Basercms Basercms 1.6.15 Basercms Basercms 2.0.0 Basercms Basercms 2.0.1 Basercms Basercms 2.0.2 Basercms Basercms 2.0.3 Basercms Basercms 2.0.4 Basercms Basercms 2.0.5 Basercms Basercms 2.0.5.1 Basercms Basercms 2.1.0 Basercms Basercms 2.1.1 Basercms Basercms 2.1.2 Basercms Basercms 3.0.0 Basercms Basercms 3.0.0.1 Basercms Basercms 3.0.1 Basercms Basercms 3.0.1.1 Basercms Basercms 3.0.2 Basercms Basercms 3.0.2.1 Basercms Basercms 3.0.3 Basercms Basercms 3.0.3.1 Basercms Basercms 3.0.4 Basercms Basercms 3.0.4.1 Basercms Basercms 3.0.5 Basercms Basercms 3.0.5.1 Basercms Basercms 3.0.5.2 Basercms Basercms 3.0.6 Basercms Basercms 3.0.6.1 Basercms Basercms 3.0.6.2 Basercms Basercms 3.0.7 Basercms Basercms 3.0.7.1 Basercms Basercms 3.0.8 Basercms Basercms 3.0.8.1 Basercms Basercms 3.0.9 Basercms Basercms 3.0.9.1 Basercms Basercms 3.0.10 Basercms Basercms 3.0.10.1 Basercms Basercms 3.0.11 Basercms Basercms 3.0.11.1 Basercms Basercms 3.0.12 Basercms Basercms 3.0.13 Basercms Basercms 3.0.14 Basercms Basercms 3.0.15 Basercms Basercms 3.0.16 Basercms Basercms 4.0.0 Basercms Basercms 4.0.1 Basercms Basercms 4.0.2 Basercms Basercms 4.0.2.1 Basercms Basercms 4.0.3 Basercms Basercms 4.0.4 Basercms Basercms 4.0.5 Basercms Basercms 4.0.5.1 Basercms Basercms 4.0.5.2 Basercms Basercms 4.0.6 Basercms Basercms 4.0.7 Basercms Basercms 4.0.8 Basercms Basercms 4.0.9 Basercms Basercms 4.0.10 Basercms Basercms 4.0.10.1 Basercms Basercms 4.0.11 Basercms Basercms 4.1.0 Basercms Basercms 4.1.0.1 Basercms Basercms 4.1.1 Basercms Basercms 4.1.2 Basercms Basercms 4.1.3 Basercms Basercms 4.1.4 Basercms Basercms 4.1.5 Basercms Basercms 4.1.6 Basercms Basercms 4.1.7 Basercms Basercms 4.1.8 Basercms Basercms 4.3.6	109

Summary

Vulnerable Configurations

References