MU
Vendor
Murasoftware
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-67830 | MC Mura Cms Murasoftware | 9.8 | Mar 18 | Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection |
| CVE-2025-55040 | MC Mura Cms Murasoftware | 8.8 | Mar 18 | The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack |
| CVE-2025-55041 | MC Mura Cms Murasoftware | 8.0 | Mar 18 | MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate… |
| CVE-2025-55043 | MC Mura Cms Murasoftware | 6.5 | Mar 18 | MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to force… |
| CVE-2025-55044 | MC Mura Cms Murasoftware | 8.8 | Mar 18 | The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF |
| CVE-2025-55045 | MC Mura Cms Murasoftware | 7.1 | Mar 18 | The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF |
| CVE-2025-55046 | MC Mura Cms Murasoftware | 8.1 | Mar 18 | MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack |
| CVE-2025-67829 | MC Mura Cms Murasoftware | 9.8 | Mar 18 | Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection |
| CVE-2022-47003 | MC Mura Cms Murasoftware | 9.8 | Feb 1 | A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request |