TI-2008-00365 CVE-2008-0390 · GHSA-pqfc-759q-j9jg
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to…
Priority LOW 37
stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary PHP code into online.db.txt via the X-Forwarded-For HTTP header in a stat action to index.php, and execute online…