CVE-2014-3974

Description

References

• bot24.blogspot.com/2014/05/auracms-30-cross-site-scripting-local.html · Exploit
• osvdb.org/show/osvdb/107554
• packetstormsecurity.com/files/126843/AuraCMS-3.0-Cross-Site-Scripting-Local-File-Inclusion.html · Exploit
• secunia.com/advisories/58850
• exploit-db.com/exploits/33555 · Exploit

Weitere Schwachstellen in auracms

• CVE-2018-16338HOCH 8.8An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users a…
• CVE-2018-15199MITTEL 5.4AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.
• CVE-2014-3975MITTEL 5.0Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in t…
• CVE-2014-1401MITTEL 6.5Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the…
• CVE-2010-4774HOCH 7.5SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a dif…