CVE-2008-3203

js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter.

Date published : 2008-07-17

http://www.securityfocus.com/bid/30169

http://www.auracms.org/