CVE-2007-4804: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 hal.php, 2 cetak.php, 3 lihat.php, 4 pesan.php, and 5 teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to t...

AuraCMS 1.5rc Multiple Remote SQL Injection Vulnerabilities

No description provided by source. AuraCMS version 1.5rc - Multiple Remote SQL Injection Vulnerabilities Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net // Kutu pada berkas 'hal.php' baris-7 $perintah="SELECT FROM...

CVE-2006-3558: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via 1 the judulartikel parameter in teman.php and 2 the title of an article sent to admin, which is displayed when unauthenticated users visit index.php...

CVE-2005-0655: Undefined Security Weakness

auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to 1 teman.php, 2 hal.php, or 3 arsip.php, which reveals the path in a PHP error message...