AuraCMS 1.62 - 'pdf.php' SQL Injection Vulnerability

AuraCMS 1.62 'pdf.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/45003/info AuraCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

AuraCMS SQL Injection

----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage : http://indonesiancoder.com Vendor :...

AuraCMS 1.62 - pfd.php SQL Injection

AuraCMS 1.62 - pfd.php SQL Injection ----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage :...

AuraCMS 1.62 - 'pfd.php' SQL Injection

----------------------------------------------------------------------- AuraCMS pfd.php SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Arianom [email protected] Homepage : http://indonesiancoder.com Vendor :...

CVE-2008-3203

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

Authentication flaw

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

CVE-2008-3203

AuraCMS 2.2 (through 2.2.2) is affected by an authentication flaw in js/pages/pages_data.php where no authentication is performed. Remote attackers can modify the id parameter to add, edit, or delete web content. The issue is documented across multiple sources (NVD, CVE listings) and is capable o...

CVE-2008-3203

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

CVE-2008-3203: Improper Authentication

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

auraCMS 'pages_data.php' SQL注入漏洞

BUGTRAQ ID: 30159 CNCAN ID：CNCAN-2008071102 auraCMS是一款基于PHP的WEB应用程序。 auraCMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'pagesdata.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 0 auraCMS 2.2.2 目前没有解决方案提供： a href=http://www.auracms.org/index.php...

AuraCMS <= 2.2.2 (pages_data.php) Arbitrary Edit/Add/Delete Exploit

No description provided by source. !/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan :...

auracms-addeditdelete.txt

!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan : pada berkas pagesdata.php dari awa...

AuraCMS 2.2.2 - pages_data.php Arbitrary EditAddDelete

AuraCMS 2.2.2 - pagesdata.php Arbitrary EditAddDelete !/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu :...

AuraCMS 2.2.2 - '/pages_data.php' Arbitrary Edit/Add/Delete

!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan : pada berkas pagesdata.php dari awa...

AuraCMS <= 2.2.2 (pages_data.php) Arbitrary Edit/Add/Delete Exploit

Exploit for unknown platform in category web applications =================================================================== AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete Exploit =================================================================== !/usr/bin/perl k1tk4t Public Security...

Sql injection

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...

CVE-2008-1715

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...

CVE-2008-1715

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...

CVE-2008-1715

AuraCMS 2.2.1 and earlier is affected by an SQL injection in content/user.php when magic_quotes_gpc is disabled. The country parameter is the injection vector, allowing remote attackers to execute arbitrary SQL commands. The available sources confirm the vulnerability and affected version range, ...

CVE-2008-1715: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...