CVE-2026-76635
Received Received - Intake

SQL Injection in baserCMS Prior to 5.3.0

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: VulnCheck

Description
baserCMS before 5.3.0 contains a SQL injection vulnerability in BcDatabaseService.php that allows authenticated administrators to inject attacker-controlled table names and configuration values directly into SQL statements across sequence update, CSV export, and table management operations. Attackers can chain a backup restore code injection flaw, where PHP code outside class definitions in schema files executes unconditionally upon loading, to plant malicious table names and trigger error-based SQL injection that retrieves database version, schema contents, and arbitrary data from the PostgreSQL backend.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-76635
EUVD
EUVD-2026-63365

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
baserproject basercms to 5.3.0 (exc)
baserproject basercms 5.2.8
baserproject basercms 5.1
basercms basercms to 5.3.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76635 is a critical SQL injection and code injection vulnerability in baserCMS versions before 5.3.0. It exists in BcDatabaseService.php where authenticated administrators can inject malicious table names and configuration values into SQL statements during operations like sequence updates, CSV exports, and table management. Attackers can exploit a backup restore flaw to inject PHP code into schema files, which executes automatically when loaded, enabling error-based SQL injection to retrieve sensitive database data.

Detection Guidance

Check baserCMS version with: grep -r 'basercms' /var/www/html/ | grep 'version'. Inspect BcDatabaseService.php for raw SQL queries without parameterization. Monitor for unusual database access patterns or error logs indicating SQL injection attempts.

Impact Analysis

This vulnerability allows attackers with administrative access to execute arbitrary PHP code, extract sensitive database information including credentials, manipulate database contents, and escalate privileges. Successful exploitation could lead to full database compromise, unauthorized data access, or system takeover.

Compliance Impact

This vulnerability could severely impact compliance with GDPR and HIPAA by enabling unauthorized access to sensitive personal or health data. GDPR requires protection of personal data, while HIPAA mandates safeguards for protected health information. A breach could result in regulatory penalties, legal liabilities, and reputational damage due to compromised data integrity and confidentiality.

Mitigation Strategies

Upgrade baserCMS to version 5.3.0 or later immediately. Review and sanitize all user inputs in BcDatabaseService.php. Disable backup restoration from untrusted sources. Implement strict schema file validation to reject PHP code outside class definitions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76635. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart