CVE-2008-0811

AuraCMS 1.62 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via the kid parameter to mod/dl.php or mod/links.php, and via the query parameter to search.php. The CVE entry reports these injection points and indicates the a...