Auracms vulnerabilities

Products

• Auracms 17

Newest

• auracms An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the... CVE-2018-16338 8.8 HighSeptember 2, 2018
• auracms AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action. CVE-2018-15199 5.4 MediumAugust 8, 2018
• auracms Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers... CVE-2014-3975 Public exploit 5.0 MediumJune 5, 2014
• auracms Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows... CVE-2014-3974 Public exploit 4.3 MediumJune 5, 2014
• auracms Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated... CVE-2014-1401 Public exploit 6.5 MediumFebruary 11, 2014
• auracms SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute... CVE-2010-4774 Public exploit 7.5 HighMarch 23, 2011
• auracms js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which... CVE-2008-3203 Public exploit 7.5 HighJuly 17, 2008
• auracms SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when... CVE-2008-1715 Public exploit 6.8 MediumApril 9, 2008
• auracms SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to... CVE-2008-1398 Public exploit 6.8 MediumMarch 20, 2008
• auracms Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute... CVE-2008-0811 Public exploit 7.5 HighFebruary 19, 2008
• auracms SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote... CVE-2008-0735 Public exploit 10.0 HighFebruary 13, 2008
• auracms, auracms mod block statistik +1 more stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject... CVE-2008-0390 Public exploit 7.5 HighJanuary 23, 2008
• auracms Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users... CVE-2007-6552 Public exploit 6.0 MediumDecember 28, 2007
• auracms Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers... CVE-2007-4908 Public exploit 7.5 HighSeptember 17, 2007
• auracms Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers... CVE-2007-4905 Public exploit 7.5 HighSeptember 17, 2007
• auracms Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote... CVE-2007-4886 Public exploit 6.8 MediumSeptember 14, 2007
• auracms Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute... CVE-2007-4804 Public exploit 7.5 HighSeptember 11, 2007
• auracms modul forum sederhana SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum... CVE-2007-4171 Public exploit 7.5 HighAugust 7, 2007