high8.8
CVE-2018-19104
In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
Impact
In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bagesoft | Bagecms | Version 3.1.3 |