Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aerocms project vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2022-27063
AeroCMS v0.0.1 exists to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
Aerocms Project Aerocms 0.0.1
7.2
CVSSv3
CVE-2022-27061
AeroCMS v0.0.1 exists to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows malicious users to execute arbitrary code via a crafted PHP file.
Aerocms Project Aerocms 0.0.1
4.8
CVSSv3
CVE-2022-27062
AeroCMS v0.0.1 exists to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
Aerocms Project Aerocms 0.0.1
5.4
CVSSv3
CVE-2023-29847
AeroCMS v0.0.1 exists to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php. These vulnerabilities allow malicious users to execute arbitrary web scripts or HTML via a crafted payload.
Aerocms Project Aerocms 0.0.1
6.5
CVSSv3
CVE-2022-38812
AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
Aerocms Project Aerocms 0.1.1
4.9
CVSSv3
CVE-2022-46047
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.
Aerocms Project Aerocms 0.0.1
7.2
CVSSv3
CVE-2022-46051
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
Aerocms Project Aerocms 0.0.1
4.8
CVSSv3
CVE-2022-46058
AeroCMS v0.0.1 exists to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
Aerocms Project Aerocms 0.0.1
6.5
CVSSv3
CVE-2022-46059
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).
Aerocms Project Aerocms 0.0.1
6.1
CVSSv3
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking.
Aerocms Project Aerocms 0.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400
CVE-2023-7252
CVE-2024-21111
denial of service
CVE-2024-29661
CVE-2024-22856
remote attackers
encryption
CVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »