CVE-2008-0811

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

CVE-2008-0811

AuraCMS 1.62 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via the kid parameter to mod/dl.php or mod/links.php, and via the query parameter to search.php. The CVE entry reports these injection points and indicates the a...

CVE-2008-0811: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

auracms162-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

AuraCMS 1.62 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/...

AuraCMS 1.62 Multiple Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== AuraCMS 1.62 Multiple Remote SQL Injection Exploit ================================================== !/usr/bin/perl Indonesian Newhack Security Advisory ----------------------------------...

AuraCMS 1.62 - Multiple SQL Injections

AuraCMS 1.62 - Multiple SQL Injections !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/...

AuraCMS 1.62 - Multiple SQL Injections

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

AuraCMS 2.2 (gallery_data.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP and SQL...

Sql injection

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

CVE-2008-0735

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

auracms22-sql.txt

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP and SQL ! Bug........: $GET'albums' in...

CVE-2008-0735

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

CVE-2008-0735: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...

CVE-2008-0735

CVE-2008-0735 pertains to AuraCMS 2.2, where a flaw in mod/gallery/ajax/gallery_data.php allows an attacker to inject SQL via the albums parameter. The documented impact is the ability to execute arbitrary SQL commands remotely, indicating complete confidentiality, integrity, and availability imp...

AuraCMS 2.2 (gallery_data.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== AuraCMS 2.2 gallerydata.php Remote SQL Injection Exploit =========================================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use...

AuraCMS 2.2 - albums Pramater SQL Injection

AuraCMS 2.2 - albums Pramater SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP a...

AuraCMS 2.2 - 'albums' Pramater SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP and SQL ! Bug........: $GET'albums' in...

Code injection

stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php...

CVE-2008-0390

CVE-2008-0390 affects AuraCMS 1.62 and Mod Block Statistik for AuraCMS. The vulnerability is a remote code-injection via the X-Forwarded-For header in a stat action to index.php, allowing an attacker to inject arbitrary PHP code into online.db.txt and later execute online.db.txt through a crafted...