Vulnerability · Published Aug 20, 2026 · Assigned by VulnCheck
CVE-2026-76635baserCMS < 5.3.0 SQL Injection and Code Injection via BcDatabaseService.php
High 7.2
In plain English
A high-severity SQL injection in basercms from baserproject. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Official description
baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configuration values directly into SQL statements across sequence update, CSV export, and table management operations. Attackers can chain a backup restore code injection flaw, where PHP code outside class definitions in schema files executes unconditionally upon loading, to plant malicious table names and trigger error-based SQL injection that retrieves database version, schema contents, and arbitrary data from the PostgreSQL backend.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| baserproject | basercms | 0 – before 5.3.0 |
Weakness: CWE-89, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- GitHub Security Advisory (GHSA-cg65-f2m7-9fqj) vendor-advisory
- baserCMS 5.3.0 Release Notes release-notes
- https://www.vulncheck.com/advisories/basercms-sql-injection-and-code-injection-via-bcdatabaseservice-php third-party-advisory