Vulnerabilities (CVE)

Filtered by vendor Bagesoft Subscribe
Filtered by product Bagecms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-18258 1 Bagesoft 1 Bagecms 2019-06-26 7.5 HIGH 9.8 CRITICAL
An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web server via an index.php?r=admini/template/updateTpl&filename= URI.