Back to search
CVE-2008-0390
Published: Jan 23, 2008
Modified: Aug 7, 2024
PUBLISHED
Description
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online.db.txt via a certain request to index.php.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
27342
vdb-entry
x_refsource_BID
4933
exploit
x_refsource_EXPLOIT-DB
auracms-stat-code-execution(39777)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now