CVE-2008-0735

Auracms - SQL Injection

Title source: rule

Description

SQL injection vulnerability in mod/gallery/ajax/gallery_data.php in AuraCMS 2.2 allows remote attackers to execute arbitrary SQL commands via the albums parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by DNX · perlwebappsphp
https://www.exploit-db.com/exploits/5105

References (3)

Scores

EPSS 0.0049
EPSS Percentile 65.4%

Details

CWE
CWE-89
Status published
Products (1)
auracms/auracms 2.2
Published Feb 13, 2008
Tracked Since Feb 18, 2026