Beveiligingsadvies

CVE-2007-4804

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-09-11 18:00:00

Laatst bijgewerkt 2024-08-07 15:08:33

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. NOTE: the scripts may be accessed through requests to the product's top-level default URI, using the pilih parameter, in some circumstances.

← Alle CVE's bekijken Bekijk op cve.org ↗