VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 24, 2019· Updated Jun 17, 2026

CVE-2019-10015

CVE-2019-10015

Description

baigoStudio baigoSSO v3.0.1 allows remote attackers to execute arbitrary PHP code via the first form field of a configuration screen, because this code is written to the BG_SITE_NAME field in the opt_base.inc.php file.

Affected products

2
  • Baigostudio/Baigossoinferred2 versions
    = 3.0.1+ 1 more
    • (no CPE)range: = 3.0.1
    • (no CPE)range: =3.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.