CVE

Id
28262  
CVE No.
CVE-2007-4905  
Status
Candidate  
Description
Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/.  
Phase
Assigned (20070917)  
Votes
None (candidate not yet proposed)  
Comments