Known Vulnerabilities for Bagecms by Bagesoft
Listed below are 7 of the newest known vulnerabilities associated with "Bagecms" by "Bagesoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-37122 json | A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML... | 5.4 - MEDIUM | 2023-07-06 | 2023-07-11 |
| CVE-2019-8421 json | upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlia... | 7.2 - HIGH | 2019-02-17 | 2019-02-20 |
| CVE-2018-19560 json | BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account. | 8.8 - HIGH | 2018-11-26 | 2018-12-31 |
| CVE-2018-19104 json | In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privile... | 8.8 - HIGH | 2018-11-08 | 2018-12-11 |
| CVE-2018-18258 json | An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file... | 9.8 - CRITICAL | 2018-10-11 | 2019-06-26 |
| CVE-2018-18257 json | An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=a... | 7.5 - HIGH | 2018-10-11 | 2018-11-29 |
| CVE-2018-14582 json | index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account. | 8.8 - HIGH | 2018-07-24 | 2018-09-18 |