CVE-2007-4905: Auracms

High severity, CVSS 7.5. EPSS: 7% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/.

Affected products

• Auracms Auracms: version 2.1 only

Published 2007-09-17. Last modified 2026-06-16.