CVE-2007-4905

Published: Sep 17, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/.

Affected (1)

Products: Auracms: Auracms

Auracms

1 product

Auracms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Auracms Auracms	Version 2.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://osvdb.org/40505

Source: cve@mitre.org

http://secunia.com/advisories/26747

Source: cve@mitre.org

http://www.auracms.org/?pilih=news&aksi=lihat&id=117

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/25621

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36539

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4390

Source: cve@mitre.org

http://osvdb.org/40505