返回 CVE 瀏覽器

CVE-2007-4171

HIGH

7.5

CVSS Severity Score

EPSS Score0.1200%

EPSS Percentile31.55th

Published2007年8月7日

Last Modified2026年4月23日

Vulnerability Description

SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information.

Affected Platforms (CPE)

📦

Auracms

Modul Forum Sederhana

All versions

References & Advisories

🔗 http://osvdb.org/36432

🔗 http://secunia.com/advisories/26332

🔗 http://www.securityfocus.com/archive/1/475645/100/0/threaded

🔗 http://www.securityfocus.com/bid/25202

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/35814

🔗 https://www.exploit-db.com/exploits/4254

🔗 http://osvdb.org/36432

🔗 http://secunia.com/advisories/26332

相關漏洞威脅

CVE-2007-195910.0

Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vector...

CVE-2007-005710.0

Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a sh...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-010010.0

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows r...