CVE-2007-4886 Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2....
MediumCVSS 6.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| auracms | = 1.0 | No fix listed |
| auracms | = 1.1 | No fix listed |
| auracms | = 1.2 | No fix listed |
| auracms | = 1.3 | No fix listed |
| auracms | = 1.5 | No fix listed |
| auracms | = 1.6_beta | No fix listed |
| auracms | = 1.61 | No fix listed |
| auracms | = 1.62 | No fix listed |
| auracms | = 2.0 | No fix listed |
| auracms | = 2.1 | No fix listed |
References
- 40506 vdb-entry
- www.auracms.org
- 4390 exploit