A vulnerability was found in auraCMS. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file pesan.php. The manipulation of the argument id leads to sql injection.

This vulnerability is known as CVE-2007-4804. The attack can be launched remotely. Furthermore, there is an exploit available.