TI-2026-10541 CVE-2026-12257 · GHSA-h3q4-w5v4-67hw
Remote code execution in Mura Software’s CMS
Priority MEDIUM 49
Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability.
Vulnerabilities
10 records
TI-2025-41475 CVE-2025-67830 · GHSA-rqjq-v35m-22rv
Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.
Priority MEDIUM 49
Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.
TI-2025-41474 CVE-2025-67829 · GHSA-77rj-6mj7-3h9q
Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.
Priority MEDIUM 49
Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.
TI-2025-34737 CVE-2025-55046 · GHSA-9hfh-6c3r-3gf5
MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to…
Priority LOW 34
MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.
TI-2025-34736 CVE-2025-55045 · GHSA-6r2v-hf4m-fxxv
The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to…
Priority LOW 30
The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.
TI-2025-34735 CVE-2025-55044 · GHSA-mwfv-gh9m-r5cv
The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to…
Priority LOW 39
The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.
TI-2025-34734 CVE-2025-55043 · GHSA-98rp-58fp-h8mj
MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation…
Priority LOW 28
MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to force administrators to create and save site bundles…
TI-2025-34733 CVE-2025-55041 · GHSA-cp9h-h8x8-m9h6
MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality…
Priority LOW 36
MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to escalate privileges by adding any user to any group with…
TI-2025-34732 CVE-2025-55040 · GHSA-fh72-f987-9cgr
The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload…
Priority LOW 39
The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.
TI-2022-23275 CVE-2022-47003 · GHSA-q3p4-9xc9-mmhf
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers…
Priority MEDIUM 55
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.