CVE-2017-10844

HIGH

8.8

CVSS Severity Score

EPSS Score0.0500%

EPSS Percentile30.28th

Published2017年8月29日

Last Modified2026年5月13日

Vulnerability Description

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.

📦

Basercms

>= 3.0.0 and <= 3.0.14

📦

Basercms

>= 4.0.0 and <= 4.0.5

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL...

There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. Users wit...

baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to ex...

Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack ...