CVE-2006-3559 | BDVDB-2026-18077 Detail

Description#

Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the (1) name and (2) pesan parameters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/28201
http://www.securityfocus.com/archive/1/439494/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27705
http://h1.ripway.com/lintah/adv/txt/01-iFX-2006-AuraCMS-v1.62-XSS-Bug.txt
http://securityreason.com/securityalert/1226
http://www.securityfocus.com/bid/18867

Exploit#

No public exploit known

History#

Version 12006-07-13Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.