Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

215 matches found

exploitpack
exploitpack•added 2014/05/28 12:00 a.m.•21 views

AuraCMS 3.0 - Multiple Vulnerabilities

AuraCMS 3.0 - Multiple Vulnerabilities Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS...

0.3AI score
SaveExploits0
NVD
NVD•added 2014/02/11 5:55 p.m.•42 views

CVE-2014-1401

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 search parameter to mod/content/content.php or 2 CLIENTIP, 3 XFORWARDEDFOR, 4 XFORWARDED, 5 FORWARDEDFOR, or 6 FORWARDED HTTP header to index.php...

6.5CVSS8AI score0.02982EPSS
SaveExploits5References8
Prion
Prion•added 2014/02/11 5:55 p.m.•39 views

Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 search parameter to mod/content/content.php or 2 CLIENTIP, 3 XFORWARDEDFOR, 4 XFORWARDED, 5 FORWARDEDFOR, or 6 FORWARDED HTTP header to index.php...

6.5CVSS8.7AI score0.02982EPSS
SaveExploits5References8Affected Software1
Cvelist
Cvelist•added 2014/02/11 5:00 p.m.•59 views

CVE-2014-1401

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 search parameter to mod/content/content.php or 2 CLIENTIP, 3 XFORWARDEDFOR, 4 XFORWARDED, 5 FORWARDEDFOR, or 6 FORWARDED HTTP header to index.php...

8AI score0.02982EPSS
SaveExploits5References8
CVE
CVE•added 2014/02/11 5:00 p.m.•78 views

CVE-2014-1401

AuraCMS 2.3 and earlier versions are affected by SQL injection vulnerabilities (CVE-2014-1401). The issues allow remote authenticated users to alter or execute arbitrary SQL via the search parameter in index.php or via several HTTP headers (CLIENT_IP, X_FORWARDED_FOR, X_FORWARDED, FORWARDED_FOR, ...

6.5CVSS8.2AI score0.02982EPSS
SaveExploits5References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2014/02/11 12:00 a.m.•3 views

CVE-2014-1401: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 search parameter to mod/content/content.php or 2 CLIENTIP, 3 XFORWARDEDFOR, 4 XFORWARDED, 5 FORWARDEDFOR, or 6 FORWARDED HTTP header to index.php...

6.5CVSS6.4AI score0.02982EPSS
SaveExploits5References2
securityvulns
securityvulns•added 2014/02/11 12:00 a.m.•90 views

Multiple SQL Injection Vulnerabilities in AuraCMS

Advisory ID: HTB23196 Product: AuraCMS Vendor: AuraCMS Vulnerable Versions: 2.3 and probably prior Tested Version: 2.3 Advisory Publication: January 8, 2014 without technical details Vendor Notification: January 8, 2014 Vendor Patch: January 30, 2014 Public Disclosure: February 5, 2014...

6.5CVSS0.02982EPSS
SaveExploits5
seebug.org
seebug.org•added 2014/02/08 12:00 a.m.•52 views

AuraCMS多个SQL注入漏洞

CVE ID：CVE-2014-1401 auraCMS是一款基于PHP的WEB应用程序。 AuraCMS存在SQL注入漏洞。由于在程序SQL查询使用之前未能充分过滤未明的输入，允许远程攻击者在后端数据库中注入或操纵SQL查询，允许任意数据的操纵或披露。 0 Auracms 2.3 厂商补丁： Auracms ----- 1月30日后更新的Auracms 2.3版本以修复此漏洞，建议用户下载使用： http://auracms.org 1.The exploitation example below displays version of MySQL server:...

6.5CVSS6.5AI score0.02982EPSS
SaveExploits5
exploitpack
exploitpack•added 2014/02/07 12:00 a.m.•94 views

AuraCMS 2.3 - Multiple Vulnerabilities

AuraCMS 2.3 - Multiple Vulnerabilities Advisory ID: HTB23196 Product: AuraCMS Vendor: AuraCMS Vulnerable Versions: 2.3 and probably prior Tested Version: 2.3 Advisory Publication: January 8, 2014 without technical details Vendor Notification: January 8, 2014 Vendor Patch: January 30, 2014 Public...

6.5CVSS0.4AI score0.02982EPSS
SaveExploits5
Exploit DB
Exploit DB•added 2014/02/07 12:00 a.m.•66 views

AuraCMS 2.3 - Multiple Vulnerabilities

Advisory ID: HTB23196 Product: AuraCMS Vendor: AuraCMS Vulnerable Versions: 2.3 and probably prior Tested Version: 2.3 Advisory Publication: January 8, 2014 without technical details Vendor Notification: January 8, 2014 Vendor Patch: January 30, 2014 Public Disclosure: February 5, 2014...

6.5CVSS5.2AI score0.02982EPSS
SaveExploits5
Packet Storm
Packet Storm•added 2014/02/06 12:00 a.m.•74 views

AuraCMS 2.3 SQL Injection

Advisory ID: HTB23196 Product: AuraCMS Vendor: AuraCMS Vulnerable Versions: 2.3 and probably prior Tested Version: 2.3 Advisory Publication: January 8, 2014 without technical details Vendor Notification: January 8, 2014 Vendor Patch: January 30, 2014 Public Disclosure: February 5, 2014...

6.5CVSS0.1AI score0.02982EPSS
SaveExploits5
htbridge
htbridge•added 2014/01/08 12:00 a.m.•79 views

Multiple SQL Injection Vulnerabilities in AuraCMS

High-Tech Bridge Security Research Lab discovered two SQL injection vulnerabilities in AuraCMS, which can be exploited to alter SQL queries and execute arbitrary SQL commands in application's database. 1 Multiple SQL Injection Vulnerabilities in AuraCMS: CVE-2014-1401 1.1 The vulnerability exists...

6.5CVSS8.2AI score0.02982EPSS
SaveExploits5Affected Software1
NVD
NVD•added 2011/03/23 10:00 p.m.•27 views

CVE-2010-4774

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

7.5CVSS8.1AI score0.00926EPSS
SaveExploits2References1
Prion
Prion•added 2011/03/23 10:00 p.m.•28 views

Sql injection

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

7.5CVSS8.7AI score0.03346EPSS
SaveExploits4References1Affected Software1
CVE
CVE•added 2011/03/23 9:00 p.m.•54 views

CVE-2010-4774

Summary (CVE-2010-4774): AuraCMS 1.62 contains an SQL injection in the pdf.php component, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. This vulnerability is documented as a separate vector from CVE-2007-4804/2007-4171, and is supported by multiple connecte...

7.5CVSS8.5AI score0.00926EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist•added 2011/03/23 9:00 p.m.•46 views

CVE-2010-4774

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

8.1AI score0.00926EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2011/03/23 12:00 a.m.•4 views

CVE-2010-4774: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

7.5CVSS6.4AI score0.00926EPSS
SaveExploits2References2
myhack58
myhack58•added 2010/11/24 12:00 a.m.•18 views

AuraCMS SQL injection vulnerability-vulnerability warning-the black bar safety net

AuraCMS is a CMS, AuraCMS pfd. php existsSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected]...

1.8AI score
SaveExploits0
zdt
zdt•added 2010/11/23 12:00 a.m.•32 views

AuraCMS (pfd.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= AuraCMS pfd.php SQL Injection Vulnerability ============================================= Author : Arianom email protected Homepage : http://indonesiancoder.com Vendor : http://www.auracms.org/...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm•added 2010/11/23 12:00 a.m.•27 views

AuraCMS 1.62 pfd.php SQL Injection

----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage : http://indonesiancoder.com Vendor :...

0.1AI score
SaveExploits0
Rows per page
Query Builder