EUVD-2014-1479

Malware in sbrugna...

CVE-2014-3974

Cross-site scripting XSS vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter...

CVE-2014-3975

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter...

CVE-2010-4774

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

CVE-2018-15199

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

AuraCMS Cross-Site Request Forgery Vulnerability

AuraCMS is a content management system based on PHP and MySQL. The system is characterized by simplicity and modularity. AuraCMS 2.3 version of the cross-site request forgery vulnerability , remote attackers can use admin.php?mod=users to modify the administrator password , and then add pages or...

CVE-2018-16338

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic...

Cross site request forgery (csrf)

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic...

CVE-2018-16338

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic...

CVE-2018-16338

AuraCMS 2.3 is affected by a CSRF vulnerability that can change the administrator password via admin.php?mod=users, and this may enable the attacker to subsequently add a page or menu or submit a topic. The connected documents corroborate the same issue across multiple sources (NVD, CNVD, PRION, ...

CVE-2018-16338

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic...

CVE-2018-16338: Cross-Site Request Forgery (CSRF)

An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic...

CVE-2018-15199

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

Design/Logic Flaw

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

CVE-2018-15199

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

CVE-2018-15199

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

CVE-2018-15199

CVE-2018-15199 affects AuraCMS 2.3. The vulnerability is a Cross-Site Scripting (XSS) flaw triggered via the Bukutamu → AddGuestbook action, allowing injection of arbitrary scripts. Exploitation details are not provided in the documents; CVSS metrics indicate a low/medium severity (CVSS v2 base 3...

AuraCMS Cross-Site Scripting Vulnerability

AuraCMS is a content management system based on PHP and MySQL. The system is characterized by simplicity and modularity. A cross-site scripting vulnerability exists in AuraCMS version 2.3. A remote attacker can inject arbitrary web scripts by adding a Guestbook to exploit the vulnerability...

CVE-2018-15199: Improper Neutralization of Input During Web Page Generation

AuraCMS 2.3 allows XSS via a Bukutamu - AddGuestbook action...

AuraCMS 2.1 - Remote File Attachment / LFI Vulnerabilities

No description provided by source. AuraCMS 2.1 - Remote File Attachment - Local File Inclusion Vendor : http://www.auracms.org/ Download : http://www.auracms.org/dljump.php?id=42 Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net...