CVEvulnerability
CVE-2006-3559
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-07-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the (1) name and (2) pesan parameters.
Affected configurations
• arif supriyanto auracms 1.62
References
- http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt Exploit
- http://securityreason.com/securityalert/1226 securityreason.com
- http://www.osvdb.org/28201 www.osvdb.org
- http://www.securityfocus.com/archive/1/439494/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18867 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27705 exchange.xforce.ibmcloud.com
- http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt Exploit
- http://securityreason.com/securityalert/1226 securityreason.com
- http://www.osvdb.org/28201 www.osvdb.org
- http://www.securityfocus.com/archive/1/439494/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/18867 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27705 exchange.xforce.ibmcloud.com