CVE-2011-2674

Published: Oct 2, 2011Modified: Apr 29, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.

Affected (24)

Products: Basercms: Basercms

Basercms

1 product

Basercms

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Basercms Basercms	Up to 1.6.11.4
Basercms Basercms	Version 1.5.4
Basercms Basercms	Version 1.5.5
Basercms Basercms	Version 1.5.6
Basercms Basercms	Version 1.5.7
Basercms Basercms	Version 1.5.8
Basercms Basercms	Version 1.5.9
Basercms Basercms	Version 1.6.0
Basercms Basercms	Version 1.6.10
Basercms Basercms	Version 1.6.11.1
Basercms Basercms	Version 1.6.11.2
Basercms Basercms	Version 1.6.11.3
Basercms Basercms	Version 1.6.11
Basercms Basercms	Version 1.6.1
Basercms Basercms	Version 1.6.2
Basercms Basercms	Version 1.6.3
Basercms Basercms	Version 1.6.4
Basercms Basercms	Version 1.6.5
Basercms Basercms	Version 1.6.6
Basercms Basercms	Version 1.6.7.1
Basercms Basercms	Version 1.6.7
Basercms Basercms	Version 1.6.8
Basercms Basercms	Version 1.6.9.1
Basercms Basercms	Version 1.6.9

Related CWEs

CWE-264

References (6)

http://basercms.net/patch/JVN09789751

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN16617002/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066

Source: vultures@jpcert.or.jp

http://basercms.net/patch/JVN09789751

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvn.jp/en/jp/JVN16617002/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000066

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.