Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aerocms project vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2022-27063
AeroCMS v0.0.1 exists to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-46051
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-46135
In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-46137
AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-38812
AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
Aerocms Project Aerocms 0.1.1
NA
CVE-2022-38305
AeroCMS v0.0.1 exists to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows malicious users to execute arbitrary code via a crafted PHP file.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-45330
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-45535
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
NA
CVE-2022-46047
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.
Aerocms Project Aerocms 0.0.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »