EUVD-2008-0818

Malware in sbrugna...

CVE-2010-4774

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

CVE-2010-4774

Summary (CVE-2010-4774): AuraCMS 1.62 contains an SQL injection in the pdf.php component, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. This vulnerability is documented as a separate vector from CVE-2007-4804/2007-4171, and is supported by multiple connecte...

CVE-2008-0811

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

AuraCMS 1.62 (stat.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 ...

auracms-exec.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 AuraCMS Mod Block Statistik | http://iwan.or.id/download/lihat/1/2-1-6.html Vendor :...

AuraCMS 1.62 - stat.php Remote Code Execution

AuraCMS 1.62 - stat.php Remote Code Execution !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 AuraCMS Mod Block Statistik |...

AuraCMS 1.62 (stat.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ===================================================== AuraCMS 1.62 stat.php Remote Code Execution Exploit ===================================================== !/usr/bin/perl Indonesian Newhack Security Advisory...

CVE-2006-3558

CVE-2006-3558 concerns a vulnerability in auraCMS 1.62 (Arif Supriyanto) where multiple cross-site scripting (XSS) flaws allow remote attackers to inject arbitrary script/HTML via the judul_artikel parameter in teman.php and the article title sent to admin, leading to display of injected content ...

CVE-2006-3559

The CVE-2006-3559 entry concerns AuraCMS 1.62, where the application is vulnerable to multiple SQL injections. The affected component is the AuraCMS 1.62 implementation, with the specific vectors described as injectable parameters (1) name and (2) pesan) that allow remote attackers to execute arb...