CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.9
CWE Name:  Permissions Privileges and Access Controls
Summary: basercms before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated users to gain privileges via unspecified vectors.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/NONE
Published Date: 2011-10-02
Last Modified Date: 2012-05-22