CVE-2014-1401

2014-02-1117:55:06

CWE-89

mitre

web.nvd.nist.gov

auracms

sql injection

vulnerability

remote authenticated users

nvd

cve-2014-1401

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.003

Percentile

69.1%

JSON

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6) FORWARDED HTTP header to index.php.

Affected configurations

Nvd

Node

auracmsauracmsRange≤2.3

auracmsauracmsMatch1.0

auracmsauracmsMatch1.1

auracmsauracmsMatch1.2

auracmsauracmsMatch1.3

auracmsauracmsMatch1.5

auracmsauracmsMatch1.61

auracmsauracmsMatch1.62

auracmsauracmsMatch2.0

auracmsauracmsMatch2.1

auracmsauracmsMatch2.2

auracmsauracmsMatch2.2.1

auracmsauracmsMatch2.2.2

VendorProductVersionCPE
auracmsauracms*cpe:2.3:a:auracms:auracms:*:*:*:*:*:*:*:*
auracmsauracms1.0cpe:2.3:a:auracms:auracms:1.0:*:*:*:*:*:*:*
auracmsauracms1.1cpe:2.3:a:auracms:auracms:1.1:*:*:*:*:*:*:*
auracmsauracms1.2cpe:2.3:a:auracms:auracms:1.2:*:*:*:*:*:*:*
auracmsauracms1.3cpe:2.3:a:auracms:auracms:1.3:*:*:*:*:*:*:*
auracmsauracms1.5cpe:2.3:a:auracms:auracms:1.5:*:*:*:*:*:*:*
auracmsauracms1.61cpe:2.3:a:auracms:auracms:1.61:*:*:*:*:*:*:*
auracmsauracms1.62cpe:2.3:a:auracms:auracms:1.62:*:*:*:*:*:*:*
auracmsauracms2.0cpe:2.3:a:auracms:auracms:2.0:*:*:*:*:*:*:*
auracmsauracms2.1cpe:2.3:a:auracms:auracms:2.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
auracms	auracms	*	cpe:2.3:a:auracms:auracms::::::::
auracms	auracms	1.0	cpe:2.3:a:auracms:auracms:1.0:::::::*
auracms	auracms	1.1	cpe:2.3:a:auracms:auracms:1.1:::::::*
auracms	auracms	1.2	cpe:2.3:a:auracms:auracms:1.2:::::::*
auracms	auracms	1.3	cpe:2.3:a:auracms:auracms:1.3:::::::*
auracms	auracms	1.5	cpe:2.3:a:auracms:auracms:1.5:::::::*
auracms	auracms	1.61	cpe:2.3:a:auracms:auracms:1.61:::::::*
auracms	auracms	1.62	cpe:2.3:a:auracms:auracms:1.62:::::::*
auracms	auracms	2.0	cpe:2.3:a:auracms:auracms:2.0:::::::*
auracms	auracms	2.1	cpe:2.3:a:auracms:auracms:2.1:::::::*