Auracms

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 18
    Known Exploited: 0
    1
    Critical Level Threats
    9
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2018-16338

    An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.

    Last Modified: Nov 21, 2024
    Published: Sep 02, 2018

    CVE-2018-15199

    AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.

    Last Modified: Nov 21, 2024
    Published: Aug 08, 2018

    CVE-2014-3975

    Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter.

    Last Modified: Apr 12, 2025
    Published: Jun 05, 2014

    CVE-2014-3974

    Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter.

    Last Modified: Apr 12, 2025
    Published: Jun 05, 2014

    CVE-2014-1401

    Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6) FORWARDED HTTP header to index.php.

    Last Modified: Apr 11, 2025
    Published: Feb 11, 2014
    Items Per Page
    Auracms Vulnerabilities & Security CVEs | CVE-DB