bot24.blogspot.com
http://bot24.blogspot.com/2014/05/auracms-30-cross-site-scripting-local.html CVE-2014-3975
AuraCMS 3.0 - Multiple Vulnerabilities
Record summary
CVE-2014-3975 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAuraCMS 3.0 - Multiple VulnerabilitiesExploitDB exploitby Mustafa ALTINKAYNAKNot analyzed1 file
References
5107555vdb entry
http://osvdb.org/show/osvdb/107555 packetstormsecurity.com
http://packetstormsecurity.com/files/126843/AuraCMS-3.0-Cross-Site-Scripting-Local-File-Inclusion.html 33555exploit
http://www.exploit-db.com/exploits/33555 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-3975