CVE-2007-4171

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-07 · updated 2026-06-16

Description

SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI. NOTE: some of these details are obtained from third party information.

Affected products

Auracms Modul Forum Sederhana: all versions

References

http://osvdb.org/36432
http://secunia.com/advisories/26332
http://www.securityfocus.com/archive/1/475645/100/0/threaded
http://www.securityfocus.com/bid/25202
https://exchange.xforce.ibmcloud.com/vulnerabilities/35814
https://www.exploit-db.com/exploits/4254
http://osvdb.org/36432
http://secunia.com/advisories/26332
http://www.securityfocus.com/archive/1/475645/100/0/threaded
http://www.securityfocus.com/bid/25202
https://exchange.xforce.ibmcloud.com/vulnerabilities/35814
https://www.exploit-db.com/exploits/4254

Get alerted when CVE-2007-4171 or the next vulnerability affects your stack