Auracms: >> Auracms >> 3.0 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter.
CVSS Score
4.3
EPSS Score
0.055
Published
2014-06-05
Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter.
CVSS Score
5.0
EPSS Score
0.145
Published
2014-06-05