critical9.8
CVE-2017-10842
baserCMS SQL Injection vulnerability
Impact
SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | baserproject/basercms | <= 3.0.14 | 3.0.15 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Basercms | Basercms | from 3.0.0 through 3.0.14 from 4.0.0 through 4.0.5 |