CVE-2007-4908

2007-09-1716:00:00

mitre

www.cve.org

7.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the pilih parameter.

References

osvdb.org/40504

secunia.com/advisories/26747

www.auracms.org/?pilih=news&aksi=lihat&id=117

www.securityfocus.com/bid/25619

exchange.xforce.ibmcloud.com/vulnerabilities/36541

www.exploit-db.com/exploits/4390