VYPR
High severity8.8NVD Advisory· Published Aug 29, 2017· Updated May 13, 2026

CVE-2017-10844

CVE-2017-10844

Description

baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
baserproject/basercmsPackagist
<= 3.0.14
baserproject/basercmsPackagist
>= 4.0.0, <= 4.0.5

Affected products

1
  • cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*
    Range: >=3.0.0,<=3.0.14

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.