CVE-2008-0735

CVE-2008-0735 pertains to AuraCMS 2.2, where a flaw in mod/gallery/ajax/gallery_data.php allows an attacker to inject SQL via the albums parameter. The documented impact is the ability to execute arbitrary SQL commands remotely, indicating complete confidentiality, integrity, and availability imp...

Directory traversal

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...

auracms-admin.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.2 - adminusers.php Remote Add Administrator Exploit Waktu : Dec 25 2007 04:50AM Software : AuraCMS 2.2 Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesi...