Read the docs

Baigo

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Baigo records in CISA KEV

No Baigo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Baigo Cms 5 records MEDIUM Baigo Sso 1 record LOW

Records

1 record in Baigo Sso · all components

TI-2019-07351 CVE-2019-10015 · GHSA-v2p2-mj8c-jjfr

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the…

Priority LOW 35

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01841 Published 2019-03-24 No fix listed CWE-94
Open these records in search →