CVE-2011-2674
published 2011-10-02CVE-2011-2674: BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain…
PriorityP425medium4.9CVSS 2.0
AVNACMAuSCPIPAN
EPSS
1.34%
67.9th percentile
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| basercms | basercms | <= 1.6.11.4 | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| basercms | basercms | — | — |
| baserproject | basercms | >= 0 < 1.6.12 | 1.6.12 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
BaserCMS privilege escallation
ghsa·2022-05-13
CVE-2011-2674 [MEDIUM] CWE-269 BaserCMS privilege escallation
BaserCMS privilege escallation
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
OSV
BaserCMS privilege escallation
osv·2022-05-13
CVE-2011-2674 [MEDIUM] BaserCMS privilege escallation
BaserCMS privilege escallation
BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
No detection rules found.
No public exploits indexed.
2011-10-02
Published