Details
Details
The application's restore function allows users to upload a .zip file, which is then automatically extracted. A PHP file inside the archive is included using require_once without validating or restricting the filename. An attacker can craft a malicious PHP file within the zip and achieve arbitrary code execution when it is included.
Vector: Malicious ZIP upload + insecure require_once
PoC
- Restore backup
- Load file shell (insecure
require_once)
Impact
Remote Code Execution (RCE)
Affected Packages
baserproject/basercms
Packagist
Fixed in:
5.2.3References
WEB
https://basercms.net/security/JVN_20837860ADVISORY
https://github.com/advisories/GHSA-hv78-cwp4-8r7rPACKAGE
https://github.com/baserproject/basercmsWEB
https://github.com/baserproject/basercms/releases/tag/5.2.3WEB
https://github.com/baserproject/basercms/security/advisories/GHSA-hv78-cwp4-8r7rADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2025-32957Aliases
CVSS Analysis
CVSS v3.1
8.7
Exploitability
Attack Vector
Network
AV:NAttack Complexity
Low
AC:LPrivileges Required
High
PR:HUser Interaction
None
UI:NScope
Scope
Changed
S:CImpact
Confidentiality
High
C:HIntegrity
High
I:HAvailability
None
A:N8.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:NRelated
Ecosystems
Timeline
PublishedMar 31, 2026
ModifiedMar 31, 2026