Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aerocms project vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-45536
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-38305
AeroCMS v0.0.1 exists to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows malicious users to execute arbitrary code via a crafted PHP file.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-38812
AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
Aerocms Project Aerocms 0.1.1
578
VMScore
CVE-2022-27061
AeroCMS v0.0.1 exists to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows malicious users to execute arbitrary code via a crafted PHP file.
Aerocms Project Aerocms 0.0.1
312
VMScore
CVE-2022-27062
AeroCMS v0.0.1 exists to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
Aerocms Project Aerocms 0.0.1
383
VMScore
CVE-2022-27063
AeroCMS v0.0.1 exists to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-45329
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-45330
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-45331
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2