baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.
{
"source": "CPE_RANGE",
"extracted_events": [
{
"introduced": "3.0.0"
},
{
"last_affected": "3.0.14"
},
{
"introduced": "4.0.0"
},
{
"last_affected": "4.0.5"
}
],
"cpe": "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*"
}