CVEvulnerability
CVE-2007-4804
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to the product's top-level default URI, using the pilih parameter, in some circumstances.
Affected configurations
• auracms auracms 1.5 rc
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/38409 osvdb.org
- http://osvdb.org/38410 osvdb.org
- http://osvdb.org/38411 osvdb.org
- http://osvdb.org/38412 osvdb.org
- http://osvdb.org/38413 osvdb.org
- http://www.securityfocus.com/bid/25614 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36519 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4385 www.exploit-db.com
- http://osvdb.org/38409 osvdb.org
- http://osvdb.org/38410 osvdb.org
- http://osvdb.org/38411 osvdb.org
- http://osvdb.org/38412 osvdb.org
- http://osvdb.org/38413 osvdb.org
- http://www.securityfocus.com/bid/25614 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36519 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4385 www.exploit-db.com