← Database

CVE-2005-0655

MEDIUM CVSS: 5.0 Published: 2005-05-02 Modified: 2026-06-16

Description

auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.

Affected Platforms

Arif Supriyanto Auracms

Weakness Type

NVD-CWE-Other

References