CVE-2019-9227

2019-02-2814:00:00

mitre

www.cve.org

vulnerability

baigo cms

remote code execution

arbitrary code

security issue

AI Score

9.7

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_base.inc.php file.

References

github.com/baigoStudio/baigoCMS/issues/8