High severity7.2NVD Advisory· Published Mar 24, 2019· Updated Jun 17, 2026

CVE-2019-10015

Description

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.

Affected products

Baigostudio/Baigossoinferred2 versions
= 3.0.1+ 1 more
- (no CPE)range: = 3.0.1
- (no CPE)range: =3.0.1
Baigo/Baigo SSO
cpe:2.3:a:baigo:baigo_sso:3.0.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/baigoStudio/baigoSSO/issues/12nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000