NVD CVE-2015-5640 October 5, 2015 007admin baserCMS before 3.0.8 allows remote authenticated users to modify arbitrary user settings via a crafted request.