CVE-2016-4876

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2016-4876

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4876.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-4876

Published

2017-05-12T18:29:00.467Z

Modified

2026-07-08T12:05:56.971395Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors.

References

Affected packages

Git / github.com/baserproject/basercms

Affected ranges

Type

GIT

Repo

https://github.com/baserproject/basercms

Events

Introduced

bbf784b8248b59925c84d6cfb8694b5d013c68d9

Last affected

bbf784b8248b59925c84d6cfb8694b5d013c68d9

Database specific

{
    "cpe": "cpe:2.3:a:basercms:basercms:3.0.10:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "3.0.10"
        },
        {
            "last_affected": "3.0.10"
        }
    ]
}

Affected versions

3.*

3.0.10

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4876.json"