CVE-2007-4804

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to the product's top-level default URI, using the pilih parameter, in some circumstances.

Link	Resource
http://www.securityfocus.com/bid/25614
http://osvdb.org/38409
http://osvdb.org/38412
http://osvdb.org/38410
http://osvdb.org/38413
http://osvdb.org/38411
https://exchange.xforce.ibmcloud.com/vulnerabilities/36519
https://www.exploit-db.com/exploits/4385

Configuration 1

cpe:2.3:a:auracms:auracms:1.5_rc:*:*:*:*:*:*:*

---

Published : 2007-09-11 06:17

Updated : 2017-09-29 01:29

---

NVD link : CVE-2007-4804

Mitre link : CVE-2007-4804

No products.

CWE-89