Description
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.
Unscored
CVE-2018-16338
EUVD-2018-8186GHSA-h52w-hf3x-rwpw
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users …
Published Sep 2, 2018 · Updated Aug 5, 2024 · Assigned by mitre