« Volver al listado

CVE-2007-4886

Estado: ModificadaMedia (6.8)—

Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Auracms — Auracms

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4886",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-09-14T00:17:00.000",
  "references": [
    {
      "url": "http://osvdb.org/40506",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.auracms.org/?pilih=news&aksi=lihat&id=117",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/4390",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/40506",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.auracms.org/?pilih=news&aksi=lihat&id=117",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/4390",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP remote file inclusion is blocked only for http URLs."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de lista negra incompleta en index.php de AuraCMS 1.x y probablemente 2.x permite a atacantes remotos ejecutar código PHP de su elección mediante (1) nombre de ruta UNC compartida, ó un URL (2) ftp, (3) ftps, ó (4) ssh2.sftp, en el parámetro pilih, para el que la inclusión remota de archivo en PHP está bloqueada solamente para URLs http."
    }
  ],
  "lastModified": "2026-06-16T22:44:56.693",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F28DAF5D-6FB2-40A3-AE26-83B2B653CBE7"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5F58C57-054F-4C64-9B45-CC1B0A0ABA56"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A7ADCAB-79C7-456C-A71B-C93C865B32D2"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CD4278C-D878-47D8-8AFB-FB0C8FD79052"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95C81747-2524-4F3A-94B6-BE5C7C8C1BEE"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.6_beta:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79E8BA55-608F-4E37-AA5D-25902135CAFB"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.61:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F49F7B4-6267-4BD5-AA97-0853A33DDA84"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:1.62:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C93C4BB-2CC5-48AA-9440-A2C2199F6B06"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79834D18-B70E-4ADC-B458-EF26ED1016C2"
            },
            {
              "criteria": "cpe:2.3:a:auracms:auracms:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E62CD9C-DE5F-4E6D-9D37-A1B028C1D9DC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}