CVE-2006-3559

Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the 1 name and 2 pesan parameters...

CVE-2006-3559

The CVE-2006-3559 entry concerns AuraCMS 1.62, where the application is vulnerable to multiple SQL injections. The affected component is the AuraCMS 1.62 implementation, with the specific vectors described as injectable parameters (1) name and (2) pesan) that allow remote attackers to execute arb...

CVE-2006-3558

CVE-2006-3558 concerns a vulnerability in auraCMS 1.62 (Arif Supriyanto) where multiple cross-site scripting (XSS) flaws allow remote attackers to inject arbitrary script/HTML via the judul_artikel parameter in teman.php and the article title sent to admin, leading to display of injected content ...

CVE-2006-3558

Multiple cross-site scripting XSS vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via 1 the judulartikel parameter in teman.php and 2 the title of an article sent to admin, which is displayed when unauthenticated users visit index.php...

01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt

by : iFX a.k.a inversFX [email protected] [email protected] ------------------------------- locate : Indonesia, Jakarta -------------------------------- date : 29/06/2006 -------------------------------- title : XSS on CMS Aura v1.62 -------------------------------- Developer CMS : Arif...

lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]<===>[XSS vulnerable]&[bug]

by : iFX a.k.a inversFX [email protected] [email protected] ------------------------------- locate : Indonesia, Jakarta -------------------------------- date : 29/06/2006 -------------------------------- title : XSS on CMS Aura v1.62 -------------------------------- Developer CMS : Arif...

AuraCMS.txt

--------------------------------------------------------------------------- Vulnerabilities in Aura CMS --------------------------------------------------------------------------- Author: y3dips Date: Januari, 25th 2005 Location: Indonesia, Jakarta Web: http://echo.or.id/adv/adv011-y3dips-2005.tx...