Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2015-5640

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

PublishedOct 06, 2015, 01:59

Published Byvultures@jpcert.or.jp

Package (Ecosystem)IntroducedFixedLimit

baserproject/basercms(Packagist)03.0.8N/A

CWE-264

Base Score

6.5

Vector String

AV:N/AC:L/Au:S/C:P/I:P/A:P

Base SeverityUnknown

Version

2.0

Attack Vector (AV)