CVE-2008-0735

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

Sql injection

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

CVE-2008-0735

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

AuraCMS 2.2 - 'albums' Pramater SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP and SQL ! Bug........: $GET'albums' in...