https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:07:08 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-97150 <p>When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes &#34;config.php&#34; from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.</p> <p>When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes &#34;config.php&#34; from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-97150 https://vulnerability.circl.lu/vuln/ghsa-m3wp-gxpc-2c5q <p>When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes &#34;config.php&#34; from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.</p> <p>When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes &#34;config.php&#34; from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.</p> https://vulnerability.circl.lu/vuln/ghsa-m3wp-gxpc-2c5q https://vulnerability.circl.lu/vuln/jvndb-2026-000138 <p>baserCMS plugin &#34;BcAddonMigrator&#34; provided by baserCMS Users Community contains the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/829.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Inclusion of Functionality from Untrusted Control Sphere (CWE-829) - CVE-2026-97150&lt;/li&gt;&lt;/ul&gt;Kuniyoshi Noguchi (KuniNogu) of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>baserCMS plugin &#34;BcAddonMigrator&#34; provided by baserCMS Users Community contains the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/829.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Inclusion of Functionality from Untrusted Control Sphere (CWE-829) - CVE-2026-97150&lt;/li&gt;&lt;/ul&gt;Kuniyoshi Noguchi (KuniNogu) of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://vulnerability.circl.lu/vuln/jvndb-2026-000138