Security Advisory

CVE-2008-3203

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-07-17 10:00:00
Last updated 2024-08-07 09:28:41
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter.