AuraCMS 2.2 - Remote Add Administrator

AuraCMS 2.2 - Remote Add Administrator !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.2 - adminusers.php Remote Add Administrator Exploit Waktu : Dec 25 2007 04:50AM Software : AuraCMS 2.2 Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t...

AuraCMS 2.2 (admin_users.php) Remote Add Administrator Exploit

Exploit for unknown platform in category web applications ============================================================== AuraCMS 2.2 adminusers.php Remote Add Administrator Exploit ============================================================== !/usr/bin/perl Indonesian Newhack Security Advisory...

AuraCMS 2.2 - Remote Add Administrator

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.2 - adminusers.php Remote Add Administrator Exploit Waktu : Dec 25 2007 04:50AM Software : AuraCMS 2.2 Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesi...

[Full-disclosure] 0day0day0day0day AURACMS XSS!! LATEST VERSION!!! 0day0day0day0day

0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day0day 0day0day0day0day 0day0day0day0day!!!!!!!!!!!!!!!!!!!!! BROUGHT 2 U BY UlTRa HAQRS 4 AL7 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 0day0day0day0dayTITle!!:::::::::::::AURA CMS 2.1...

auracms-upload.txt

AuraCMS 2.1 Remote File Upload Vulnerability Vulnerability Researcher: k1tk4t frm Indonesia Type : Remote Buffer Overflow Release Date : 09-19-2007 Author of this exploit: TaMbarUS tambarus at gmail dot com frm India Risk : Critical Usage : Firstly, register the victim web site. After, go to...

CVE-2007-4905

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/...

CVE-2007-4908

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pilih parameter...

Directory traversal

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pilih parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/...

CVE-2007-4908

CVE-2007-4908: Affected software is AuraCMS 2.1 and earlier. The vulnerability is a directory traversal in index.php exploitable via a crafted pilih parameter (.. dot dot), allowing remote inclusion and execution of arbitrary local files. This permits partial impact to confidentiality, integrity,...

CVE-2007-4905

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/...

CVE-2007-4908

Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pilih parameter...

CVE-2007-4905

CVE-2007-4905 affects AuraCMS 2.1. The vulnerability is an unrestricted file upload in mod/contak.php, exploitable via the image parameter to place a file under files/, enabling remote attackers to upload and execute arbitrary PHP code. Impact is described as ability to run PHP files on the serve...

Design/Logic Flaw

Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a 1 UNC share pathname, or a 2 ftp, 3 ftps, or 4 ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs...

CVE-2007-4886

Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a 1 UNC share pathname, or a 2 ftp, 3 ftps, or 4 ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs...

CVE-2007-4886

The CVE-2007-4886 entry describes an incomplete blacklist vulnerability in AuraCMS (index.php) affecting 1.x and likely 2.x, allowing remote PHP code execution via the pilih parameter when using non-http URLs (UNC share, ftp, ftps, or ssh2.sftp). The root cause is PHP remote file inclusion being ...

CVE-2007-4886

Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a 1 UNC share pathname, or a 2 ftp, 3 ftps, or 4 ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs...

AuraCMS ID参数SQL注入漏洞

AuraCMS是一款基于PHP的WEB应用程序。 AuraCMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 0 Aura CMS 1.5rc 目前没有详细解决方案提供： a href="http://www.auracms.org/index.php" target="blank"http://www.auracms.org/index.php/a...

Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...

CVE-2007-4804

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...