CVE-2005-0655: Arif Supriyanto Auracms

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.

Affected products

• Arif Supriyanto Auracms: version 1.5 only

Published 2005-05-02. Last modified 2026-06-16.