Basic CMS operates a niche content-management platform that has appeared in the vulnerability landscape, with exposure concentrating in products such as SweetRice and the Basic CMS core itself. The observed disclosures span general application-layer classes typical of web-facing administrative systems. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Basic Cms over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-2789HIGH SQL injection vulnerability in pages/index.php in BASIC-CMS allows remote attackers to execute arbitrary SQL commands via the page_id parameter. | Jun 20, 2008 | 7.5 | 48 | NO | YES |
CVE-2010-5317HIGH Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an a | Jan 3, 2015 | 7.5 | 34 | NO | YES |
CVE-2009-4231HIGH Directory traversal vulnerability in as/lib/plugins.php in SweetRice 0.5.3 and earlier allows remote attackers to include and execute arbitrary local files via .. (dot dot) in the | Dec 8, 2009 | 7.5 | 28 | NO | YES |
CVE-2009-4224MEDIUM Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root_dir parameter t | Dec 7, 2009 | 6.8 | 28 | NO | YES |
CVE-2010-5318MEDIUM The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail a | Jan 3, 2015 | 4.3 | 26 | NO | YES |
CVE-2010-0695MEDIUM Cross-site scripting (XSS) vulnerability in pages/index.php in BASIC-CMS allows remote attackers to inject arbitrary web script or HTML via the nav_id parameter. | Feb 23, 2010 | 4.3 | 21 | NO | YES |
CVE-2010-5316MEDIUM Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie. | Jan 3, 2015 | 4.3 | 17 | NO | NO |
CVE-2011-3804MEDIUM SweetRice 0.7.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrate | Sep 24, 2011 | 5.0 | 17 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Basic Cms.
Media articles that mention a CVE ID that affects a product developed by Basic Cms — matched by CVE ID, not by vendor name.