In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/bagesoft/bagecms/issues/3 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-11-08T08:00:00
Updated: 2024-08-05T11:30:03.565Z
Reserved: 2018-11-08T00:00:00
Link: CVE-2018-19104
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-11-08T08:29:00.290
Modified: 2024-11-21T03:57:20.027
Link: CVE-2018-19104
Redhat
No data.