İçeriğe atla
Noroxi

auracms kayıtları

auracms üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2008-0735
    40Planlayın

    SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands vi

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    auracms · auracms12 Şub 2008

  • CVE-2018-16338
    35İzleyin

    An issue was discovered in AuraCMS 2.3.

    YüksekCVSS 8,8İstismar yokEPSS %0

    auracms · auracms2 Eyl 2018

  • CVE-2007-4905
    32İzleyin

    Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files vi

    YüksekCVSS 7,5Kavram kanıtıEPSS %7

    auracms · auracms17 Eyl 2007

  • CVE-2007-4804
    31İzleyin

    Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1)

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    auracms · auracms11 Eyl 2007

  • CVE-2007-4908
    31İzleyin

    Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local fil

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    auracms · auracms17 Eyl 2007

  • CVE-2008-3203
    31İzleyin

    js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    auracms · auracms17 Tem 2008

  • CVE-2008-0390
    31İzleyin

    stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via t

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    auracms · auracms22 Oca 2008

  • CVE-2007-4171
    30İzleyin

    SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbit

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    auracms · modul forum sederhana7 Ağu 2007

  • CVE-2008-0811
    30İzleyin

    Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via (1) the kid parameter to

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    auracms · auracms18 Şub 2008

  • CVE-2010-4774
    30İzleyin

    SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a dif

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    auracms · auracms23 Mar 2011

  • CVE-2007-4886
    28İzleyin

    Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    auracms · auracms13 Eyl 2007

  • CVE-2014-1401
    27İzleyin

    Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    auracms · auracms11 Şub 2014

  • CVE-2008-1715
    27İzleyin

    SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    auracms · auracms9 Nis 2008

  • CVE-2008-1398
    27İzleyin

    SQL injection vulnerability in online.php in AuraCMS 2.0 through 2.2.1 allows remote attackers to execute arbitrary SQL commands via the X-F

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    auracms · auracms20 Mar 2008

  • CVE-2007-6552
    24İzleyin

    Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files

    OrtaCVSS 6,0Kavram kanıtıEPSS %2

    auracms · auracms27 Ara 2007

  • CVE-2014-3975
    22İzleyin

    Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in t

    OrtaCVSS 5,0Kavram kanıtıEPSS %7

    auracms · auracms5 Haz 2014

  • CVE-2018-15199
    21İzleyin

    AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.

    OrtaCVSS 5,4İstismar yokEPSS %1

    auracms · auracms7 Ağu 2018

  • CVE-2014-3974
    18İzleyin

    Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web scrip

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    auracms · auracms5 Haz 2014