CVE-2008-3203

AuraCMS 2.2 (through 2.2.2) is affected by an authentication flaw in js/pages/pages_data.php where no authentication is performed. Remote attackers can modify the id parameter to add, edit, or delete web content. The issue is documented across multiple sources (NVD, CVE listings) and is capable o...

CVE-2008-3203

js/pages/pagesdata.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter...

auraCMS 'pages_data.php' SQL注入漏洞

BUGTRAQ ID: 30159 CNCAN ID：CNCAN-2008071102 auraCMS是一款基于PHP的WEB应用程序。 auraCMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'pagesdata.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 0 auraCMS 2.2.2 目前没有解决方案提供： a href=http://www.auracms.org/index.php...

AuraCMS <= 2.2.2 (pages_data.php) Arbitrary Edit/Add/Delete Exploit

No description provided by source. !/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan :...

auracms-addeditdelete.txt

!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan : pada berkas pagesdata.php dari awa...

AuraCMS 2.2.2 - pages_data.php Arbitrary EditAddDelete

AuraCMS 2.2.2 - pagesdata.php Arbitrary EditAddDelete !/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu :...

AuraCMS <= 2.2.2 (pages_data.php) Arbitrary Edit/Add/Delete Exploit

Exploit for unknown platform in category web applications =================================================================== AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete Exploit =================================================================== !/usr/bin/perl k1tk4t Public Security...

AuraCMS 2.2.2 - '/pages_data.php' Arbitrary Edit/Add/Delete

!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan : pada berkas pagesdata.php dari awa...

CVE-2008-1715

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...

Sql injection

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...

CVE-2008-1715

AuraCMS 2.2.1 and earlier is affected by an SQL injection in content/user.php when magic_quotes_gpc is disabled. The country parameter is the injection vector, allowing remote attackers to execute arbitrary SQL commands. The available sources confirm the vulnerability and affected version range, ...

CVE-2008-1715

SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter...

AuraCMS 2.x &#40;user.php&#41; - Security Code Bypass &amp; Add Administrator Exploit

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 http://www.r57shell.in/r57.txt? -----------------------------------...

auracms-bypass.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 http://www.r57shell.in/r57.txt? -----------------------------------...

AuraCMS 2.x - user.php Security Code Bypass Arbitrary Add Administrator

AuraCMS 2.x - user.php Security Code Bypass Arbitrary Add Administrator !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1...

AuraCMS 2.x (user.php) Security Code Bypass / Add Administrator Exploit

Exploit for unknown platform in category web applications ======================================================================= AuraCMS 2.x user.php Security Code Bypass / Add Administrator Exploit ======================================================================= !/usr/bin/perl Indonesian...

AuraCMS 2.x (user.php) Security Code Bypass / Add Administrator Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/...

AuraCMS 2.x - '/user.php' Security Code Bypass / Arbitrary Add Administrator

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/ ----------------------------------...

CVE-2008-1398

SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

Sql injection

SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...