CVE-2007-4171 SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. N...
HighCVSS 7.5
EPSS 1.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| auracms modul forum sederhana | All versions | No fix listed |
References
- 36432 vdb-entry
- 26332 third-party-advisory vendor-advisory
- 20070805 AuraCMS [Forum Module] - Remote SQL Injection mailing-list
- 25202 vdb-entry
- auracms-komentar-sql-injection(35814) vdb-entry
- 4254 exploit