CVE-2007-4804 | BDVDB-2026-26247 Detail

Description#

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to the product's top-level default URI, using the pilih parameter, in some circumstances.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/36519
http://osvdb.org/38411
http://osvdb.org/38412
http://osvdb.org/38413
http://www.securityfocus.com/bid/25614
http://osvdb.org/38409
http://osvdb.org/38410
https://www.exploit-db.com/exploits/4385

Exploit#

https://www.exploit-db.com/exploits/4385

History#

Version 12007-09-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.