CVE-2016-4876 Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecif...
HighCVSS 8.8
EPSS 0.91%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| basercms | = 3.0.10 | No fix listed |
| baserCMS Users Community BaserCMS | = version 3.0.10 and earlier | No fix listed |
References
- basercms.net patch vendor-advisory
- 93217 third-party-advisory vdb-entry
- JVN#92765814 third-party-advisory vdb-entry