~ / search / GHSA-jc94-wp59-pq4f

GHSA-jc94-wp59-pq4f

baserCMS SQL Injection vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2017-10842

Packages

EcosystemPackageAffectedFixed in
Packagist baserproject/basercms < 3.0.15 3.0.15
Packagist baserproject/basercms >= 4.0.0, < 4.0.6 4.0.6

Details

As written in the advisory (Markdown source, shown as plain text).

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.