2018-09-02 18:00:00
mitre
PUBLISHED
An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrators password via admin.php?mod=users and subsequently add a page or menu, or submit a topic.