Vulnerabilities (CVE)

Filtered by vendor Auracms Subscribe
Filtered by product Auracms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-16338 1 Auracms 1 Auracms 2018-10-25 6.8 MEDIUM 8.8 HIGH
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.