CVE-2015-5640

baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.

Date published : 2015-10-03

http://basercms.net/security/JVN04855224

http://jvn.jp/en/jp/JVN04855224/index.html