CVE-2015-5641

baserCMS < 3.0.7 - Authenticated SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN79633796/index.html
Vendor Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000139
Vendor Advisory x_refsource_confirm
http://basercms.net/security/JVN79633796

Scores

EPSS 0.0157
EPSS Percentile 72.7%

Details

CWE
CWE-89
Status published
Products (1)
basercms/basercms < 3.0.7
Published Oct 06, 2015
Tracked Since Feb 18, 2026