Summary: In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter.Published: Monday, November 5, 2018 - 04:29cvss:
Italiano
English