CVE-2014-1401

no score yetEPSS 3.0%

auracms auracms: no CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in AuraCMS 2.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) search parameter to mod/content/content.php or (2) CLIENT_IP, (3) X_FORWARDED_FOR, (4) X_FORWARDED, (5) FORWARDED_FOR, or (6) FORWARDED HTTP header to index.php.

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2014-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

auracms:auracms

References

http://packetstormsecurity.com/files/125079
http://secunia.com/advisories/56804
http://www.exploit-db.com/exploits/31520
http://www.securityfocus.com/archive/1/530930/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/90965

Check your stack JSON