Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

aerocms vulnerabilities and exploits

(subscribe to this query)

4.8
CVSSv3
CVE-2022-27062
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field....
Aerocms Project Aerocms 0.0.1
6.1
CVSSv3
CVE-2022-27063
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field....
Aerocms Project Aerocms 0.0.1
4.9
CVE-2022-45529
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\edit_post.php. This vulnerability allows attackers to access database information....
Aerocms Project Aerocms 0.0.1
7.5
CVE-2022-45329
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information....
Aerocms Project Aerocms 0.0.1
4.9
CVE-2022-45536
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This vulnerability allows attackers to access database information....
Aerocms Project Aerocms 0.0.1
4.9
CVE-2022-45535
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information....
Aerocms Project Aerocms 0.0.1
7.5
CVE-2022-45330
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information....
Aerocms Project Aerocms 0.0.1
7.2
CVE-2022-46051
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks....
Aerocms Project Aerocms 0.0.1
6.5
CVE-2022-46059
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF)....
Aerocms Project Aerocms 0.0.1
6.1
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking....
Aerocms Project Aerocms 0.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
file inclusionCVE-2021-41144CVE-2022-34689CVE-2023-22242CVE-2023-22322XML injectionCVE-2022-39811CVE-2022-31711buffer overflow
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook