Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
auracms auracms vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2018-16338
An issue exists in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.
Auracms Auracms 2.3
5.4
CVSSv3
CVE-2018-15199
AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.
Auracms Auracms 2.3
NA
CVE-2014-3974
Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the viewdir parameter.
Auracms Auracms
1 EDB exploit
NA
CVE-2014-3975
Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote malicious users to list a directory via a full pathname in the viewdir parameter.
Auracms Auracms 3.0
1 EDB exploit
NA
CVE-2014-1401
Multiple SQL injection vulnerabilities in AuraCMS 2.3 and previous versions allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6)...
Auracms Auracms 1.5
Auracms Auracms 2.2.2
Auracms Auracms 1.0
Auracms Auracms 2.0
Auracms Auracms
Auracms Auracms 1.1
Auracms Auracms 1.2
Auracms Auracms 1.3
Auracms Auracms 2.2.1
Auracms Auracms 2.1
Auracms Auracms 2.2
Auracms Auracms 1.61
Auracms Auracms 1.62
1 EDB exploit
NA
CVE-2014-14011
AuraCMS version 2.3 suffers from a remote SQL injection vulnerability.
NA
CVE-2010-4774
SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote malicious users to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171.
Auracms Auracms 1.62
1 EDB exploit
NA
CVE-2008-3203
js/pages/pages_data.php in AuraCMS 2.2 up to and including 2.2.2 does not perform authentication, which allows remote malicious users to add, edit, and delete web content via a modified id parameter.
Auracms Auracms 2.2.2
Auracms Auracms 2.2.1
Auracms Auracms 2.2
1 EDB exploit
NA
CVE-2008-1715
SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and previous versions, when magic_quotes_gpc is disabled, allows remote malicious users to execute arbitrary SQL commands via the country parameter.
Auracms Auracms
1 EDB exploit
NA
CVE-2008-1398
SQL injection vulnerability in online.php in AuraCMS 2.0 up to and including 2.2.1 allows remote malicious users to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
Auracms Auracms 2.0
Auracms Auracms 2.2.1
Auracms Auracms 2.1
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »