Approved changes feed: RSS · Atom

cpe:2.3:a:auracms:auracms:2.3:*:*:*:*:*:*:*

part: a version: 2.3 update: *

VendorAuracms (8a186e59-38ec-5574-9117-58eb77395899)
ProductAuracms (22c47a1b-429a-53c1-a89d-d1f06117f59f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/auracms/auracms purl2cpe 2026-06-01 10:17:57.892614
pkg:sourceforge/auracms purl2cpe 2026-06-01 10:17:57.892616

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16338 vulnerable 2026-06-08 05:11:04.729781 Details available
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.
Published: 2018-09-02T18:00:00.000Z
Updated: 2024-08-05T10:24:31.592Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15199 vulnerable 2026-06-08 05:10:53.892942 Details available
AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.
Published: 2018-08-08T03:00:00.000Z
Updated: 2024-09-17T03:02:01.713Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.