Vulnerabilities > Auracms > MOD Block Statistik > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-01-23 | CVE-2008-0390 | Code Injection vulnerability in Auracms and MOD Block Statistik stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php. | 7.5 |