Known vulnerabilities in auraCMS

Vendor: auracms.opensource-indonesia.com
Software: auraCMS
Software CPE: cpe:2.3:a:auracms_opensource-indonesia_com:auracms:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 5
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting auraCMS auraCMS is affected by 5 known vulnerabilities: 1 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36745 - Cross-Site Request Forgery (CSRF)
CVE-2018-16338		 CWE-352 High
No
No
 - 02.09.2018 SB2018080817
#VU36782 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15199		 CWE-79 Low
No
No
 - 08.08.2018 SB2018080817
#VU41576 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-3975		 CWE-22 Medium
Available
No
 - 05.06.2014 SB2014060512
#VU42049 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2014-1401		 CWE-89 Low
Available
No
 - 11.02.2014 SB2014021104
#VU45166 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2010-4774		 CWE-89 Medium
Available
No
 - 24.03.2011 SB2011032401