baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.
{
"versions": [
{
"introduced": "3.0.0"
},
{
"last_affected": "3.0.15"
},
{
"introduced": "0"
},
{
"last_affected": "4.1.0.1"
}
]
}