CVE:CVE-2007-4804
CNNVD:CNNVD-200709-112
AuraCMS 1.5rc中存在多个SQL注入漏洞，远程攻击者可以借助(1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php,以及(5) teman.php中的id参数执行任意SQL指令。
solution:Upgrade auracms auracms to a higher version than 1.5_rc,and avoid the version 1.5_rc