CVE

Id
28161  
CVE No.
CVE-2007-4804  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to the product"s top-level default URI, using the pilih parameter, in some circumstances.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292156 28161 CVE-2007-4804 MILW0RM:4385  View
292157 28161 CVE-2007-4804 URL:http://www.milw0rm.com/exploits/4385  View
292158 28161 CVE-2007-4804 BID:25614  View
292159 28161 CVE-2007-4804 URL:http://www.securityfocus.com/bid/25614  View
292160 28161 CVE-2007-4804 OSVDB:38409  View
292161 28161 CVE-2007-4804 URL:http://osvdb.org/38409  View
292162 28161 CVE-2007-4804 OSVDB:38410  View
292163 28161 CVE-2007-4804 URL:http://osvdb.org/38410  View
292164 28161 CVE-2007-4804 OSVDB:38411  View
292165 28161 CVE-2007-4804 URL:http://osvdb.org/38411  View
292166 28161 CVE-2007-4804 OSVDB:38412  View
292167 28161 CVE-2007-4804 URL:http://osvdb.org/38412  View
292168 28161 CVE-2007-4804 OSVDB:38413  View
292169 28161 CVE-2007-4804 URL:http://osvdb.org/38413  View
292170 28161 CVE-2007-4804 XF:auracms-multiple-sql-injection(36519)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53923 JVNDB-2007-002615 Focus/SIS の modules/Discipline/CategoryBreakdownTime.php における PHP リモートファイルインクルージョンの脆弱性 Focus/SIS の modules/Discipline/CategoryBreakdownTime.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-4806 28161 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002615.html  View