baserCMS

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors.CVE-2021-20682baserCMS Users Community · 2.5% likely

   CWE-78

2. SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2017-10842baserCMS Users Community · 1.8% likely

   CWE-89

3. baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to bypass access restriction to view or alter a restri…CVE-2018-0572baserCMS Users Community · 1.6% likely
4. baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to execute arbitrary OS commands via unspecified vecto…CVE-2018-0569baserCMS Users Community · 1.5% likely

   CWE-78

5. baserCMS version 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to delete arbitrary files via unspecified vectors when the "File" field is being used in the mail fo…CVE-2017-10843baserCMS Users Community · 1.4% likely
6. baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction in mail form to view a file which is up…CVE-2018-0575baserCMS Users Community · 1.2% likely

   CWE-200

7. baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers with a site operator privilege to upload arbitrary files.CVE-2018-0571baserCMS Users Community · 1.1% likely

   CWE-434

8. baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to bypass access restriction for a content to view a file which is u…CVE-2018-0573baserCMS Users Community · 1.1% likely

   CWE-269

9. Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vecto…CVE-2016-4878baserCMS Users Community · 0.9% likely

   CWE-352

10. Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vecto…CVE-2016-4882baserCMS Users Community · 0.9% likely

    CWE-352

11. Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary…CVE-2016-4876baserCMS Users Community · 0.9% likely

    CWE-352

12. Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2016-4883baserCMS Users Community · 0.9% likely

    CWE-79

13. Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote attackers to inject arbitrary web script…CVE-2018-0574baserCMS Users Community · 0.8% likely

    CWE-79

14. Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary s…CVE-2021-20683baserCMS Users Community · 0.7% likely

    CWE-79

15. Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script vi…CVE-2021-20681baserCMS Users Community · 0.7% likely

    CWE-79

16. Cross-site scripting vulnerability in baserCMS (baserCMS 4.1.0.1 and earlier versions, baserCMS 3.0.15 and earlier versions) allows remote authenticated attackers to inject arbitr…CVE-2018-0570baserCMS Users Community · 0.7% likely

    CWE-79

17. Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to i…CVE-2022-42486baserCMS Users Community · CVSS 4.8 · 0.6% likely

    CWE-79

18. Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inj…CVE-2022-41994baserCMS Users Community · CVSS 4.8 · 0.6% likely

    CWE-79

19. BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by an attack…CVE-2026-65875baserCMS Users Community · CVSS 7.1 · 0.3% likely

    CWE-1236

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.