Unrated severityNVD Advisory· Published Mar 24, 2019· Updated Aug 4, 2024
CVE-2019-10015
CVE-2019-10015
Description
baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.
Affected products
1- Range: = 3.0.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/baigoStudio/baigoSSO/issues/12mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.