Vulnerabilities > CVE-2007-4171 - Unspecified vulnerability in Auracms Modul Forum Sederhana
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN auracms
exploit available
Summary
SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | AuraCMS [Forum Module] Remote SQL Injection Vulnerability. CVE-2007-4171. Webapps exploit for php platform |
| file | exploits/php/webapps/4254.txt |
| id | EDB-ID:4254 |
| last seen | 2016-01-31 |
| modified | 2007-08-05 |
| platform | php |
| port | |
| published | 2007-08-05 |
| reporter | k1tk4t |
| source | https://www.exploit-db.com/download/4254/ |
| title | AuraCMS - Forum Module Remote SQL Injection Vulnerability |
| type | webapps |
References
- http://osvdb.org/36432
- http://osvdb.org/36432
- http://secunia.com/advisories/26332
- http://secunia.com/advisories/26332
- http://www.securityfocus.com/archive/1/475645/100/0/threaded
- http://www.securityfocus.com/archive/1/475645/100/0/threaded
- http://www.securityfocus.com/bid/25202
- http://www.securityfocus.com/bid/25202
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35814
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35814
- https://www.exploit-db.com/exploits/4254
- https://www.exploit-db.com/exploits/4254