CVE:CVE-2008-0811
CNNVD:CNNVD-200802-333
AuraCMS 1.62的多个SQL注入漏洞会允许远程攻击者通过 (a) mod/dl.PHP 或者 (b) mod/links.PHP的(1) kid 参数, 以及 (2) search.PHP的query参数来执行任意SQL命令。
solution:Upgrade auracms auracms to a higher version than 1.62,and avoid the version 1.62