197 matches found
CVE-2008-0735
SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...
auracms22-sql.txt
!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP and SQL ! Bug........: $GET'albums' in...
CVE-2008-0735
SQL injection vulnerability in mod/gallery/ajax/gallerydata.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter...
CVE-2008-0735
CVE-2008-0735 pertains to AuraCMS 2.2, where a flaw in mod/gallery/ajax/gallery_data.php allows an attacker to inject SQL via the albums parameter. The documented impact is the ability to execute arbitrary SQL commands remotely, indicating complete confidentiality, integrity, and availability imp...
AuraCMS 2.2 (gallery_data.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== AuraCMS 2.2 gallerydata.php Remote SQL Injection Exploit =========================================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use...
AuraCMS 2.2 - albums Pramater SQL Injection
AuraCMS 2.2 - albums Pramater SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP a...
AuraCMS 2.2 - 'albums' Pramater SQL Injection
!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.auracms.org ! Detected...: 19.01.2008 ! Reported...: 25.01.2008 ! Response...: 30.01.2008 ! Background.: AuraCMS is a CMS based on PHP and SQL ! Bug........: $GET'albums' in...
Code injection
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php...
CVE-2008-0390
CVE-2008-0390 affects AuraCMS 1.62 and Mod Block Statistik for AuraCMS. The vulnerability is a remote code-injection via the X-Forwarded-For header in a stat action to index.php, allowing an attacker to inject arbitrary PHP code into online.db.txt and later execute online.db.txt through a crafted...
CVE-2008-0390
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php...
AuraCMS 1.62 - 'stat.php' Remote Code Execution
!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 AuraCMS Mod Block Statistik | http://iwan.or.id/download/lihat/1/2-1-6.html Vendor :...
auracms-exec.txt
!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 AuraCMS Mod Block Statistik | http://iwan.or.id/download/lihat/1/2-1-6.html Vendor :...
AuraCMS 1.62 - stat.php Remote Code Execution
AuraCMS 1.62 - stat.php Remote Code Execution !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 AuraCMS Mod Block Statistik |...
AuraCMS 1.62 (stat.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ===================================================== AuraCMS 1.62 stat.php Remote Code Execution Exploit ===================================================== !/usr/bin/perl Indonesian Newhack Security Advisory...
AuraCMS 1.62 (stat.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 ...
Directory traversal
Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...
CVE-2007-6552
AuraCMS 2.2 contains a directory traversal vulnerability in index.php: remote authenticated users can include and execute arbitrary local files by supplying a .. (dot dot) in the act parameter, potentially involving the news pilih component. The example given is including admin/admin_users.php to...
auracms-admin.txt
!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.2 - adminusers.php Remote Add Administrator Exploit Waktu : Dec 25 2007 04:50AM Software : AuraCMS 2.2 Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesi...
CVE-2007-6552
Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...
AuraCMS 2.2 (admin_users.php) Remote Add Administrator Exploit
No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.2 - adminusers.php Remote Add Administrator Exploit Waktu : Dec 25 2007 04:50AM Software : AuraCMS 2.2 Vendor : http://www.auracms.org/ Ditemukan oleh...