CVE-2010-4774: Auracms

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171.

Affected products

• Auracms Auracms: version 1.62 only

Published 2011-03-23. Last modified 2026-06-16.