Bagesoft

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Bagesoft records in CISA KEV

No Bagesoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bagecms 7 records MEDIUM

Records

7 records

TI-2018-12906 CVE-2018-18258 · GHSA-wqcf-q92w-mcgr

An issue was discovered in BageCMS 3.1.3.

MEDIUM 45

An issue was discovered in BageCMS 3.1.3.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01489 Published 2018-10-11 No fix listed CWE-94

TI-2018-13858 CVE-2018-19560 · GHSA-xhc4-5vj2-qmpr

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.

LOW 39

BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00652 Published 2018-11-26 No fix listed CWE-352

TI-2018-13543 CVE-2018-19104 · GHSA-99q7-pwhj-jjc3

In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload…

LOW 39

In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00646 Published 2018-11-08 No fix listed CWE-352

TI-2018-10450 CVE-2018-14582 · GHSA-p6cc-gmff-5q9x

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.

LOW 39

index.php?r=admini/admin/create in BageCMS V3.1.3 allows CSRF to add a background administrator account.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00523 Published 2018-07-24 No fix listed CWE-352

TI-2018-12905 CVE-2018-18257 · GHSA-6pjp-chrp-qx34

An issue was discovered in BageCMS 3.1.3.

LOW 36

An issue was discovered in BageCMS 3.1.3.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01551 Published 2018-10-11 No fix listed CWE-22

TI-2019-06040 CVE-2019-8421 · GHSA-6xf5-j3w7-8rqx

upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL…

LOW 34

upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01215 Published 2019-02-17 No fix listed CWE-89

TI-2023-18788 CVE-2023-37122 · GHSA-px22-jgfm-6wr7

A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to…

LOW 24

A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2023-07-06 No fix listed CWE-79

Open these records in search →

Critical	1
High	5
Medium	1
Low	0
No CVSS	0