CVE-2018-16338
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, o…
Published: 2018-09-02 · CVSS: Unscored
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7