Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AuraCMS 跨站请求伪造漏洞
Vulnerability Description
AuraCMS是一套基于PHP和MySQL的内容管理系统。该系统具有简单易用、模块化等特点。 AuraCMS 2.3版本中存在跨站请求伪造漏洞。远程攻击者可借助admin.php?mod=users利用该漏洞修改管理员密码，进而添加页面或菜单，或提交主题。
CVSS Information
N/A
Vulnerability Type
N/A