CVE-2008-0390: stat.php in AuraCMS 1.62, and Mod Block Statistik for AuraCMS, allows remote attackers to inject arbitrary...

Security readout for executives and security teams

CVE-2008-0390 is a remote code execution issue in AuraCMS 1.62 and its Mod Block Statistik component. A public web request can cause attacker-controlled PHP code to be written into a statistics database text file, then executed by the application. This matters most for legacy public-facing AuraCMS sites that still expose the affected statistics functionality. Exposure is likely limited to legacy AuraCMS 1.62 deployments and AuraCMS sites using Mod Block Statistik with the affected stat.php behavior. Internet-facing CMS instances are the main concern. The source bundle does not identify CPEs, supported versions, hosting defaults, or a vendor patch path. Prioritize remediation if any public-facing AuraCMS instance remains in production. The vulnerability is old but serious: it describes unauthenticated remote PHP code execution and has public exploit references. If the software is unsupported, replacement or isolation is more defensible than relying on uncertain patch availability. Mitigation focus: Check AuraCMS or archival vendor guidance for fixed versions or official remediation.; Remove or replace unsupported AuraCMS 1.62 deployments where feasible.; Disable Mod Block Statistik if business use is not required..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.