Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
aerocms project aerocms 0.0.1 vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2022-45329
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
7.5
CVSSv3
CVE-2022-45330
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
7.5
CVSSv3
CVE-2022-45331
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
4.9
CVSSv3
CVE-2022-45529
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\edit_post.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
4.9
CVSSv3
CVE-2022-45535
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
4.9
CVSSv3
CVE-2022-45536
AeroCMS v0.0.1 exists to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This vulnerability allows malicious users to access database information.
Aerocms Project Aerocms 0.0.1
5.4
CVSSv3
CVE-2023-29847
AeroCMS v0.0.1 exists to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php. These vulnerabilities allow malicious users to execute arbitrary web scripts or HTML via a crafted payload.
Aerocms Project Aerocms 0.0.1
8.8
CVSSv3
CVE-2022-38305
AeroCMS v0.0.1 exists to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows malicious users to execute arbitrary code via a crafted PHP file.
Aerocms Project Aerocms 0.0.1
7.2
CVSSv3
CVE-2022-46135
In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.
Aerocms Project Aerocms 0.0.1
7.5
CVSSv3
CVE-2022-46137
AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.
Aerocms Project Aerocms 0.0.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-40673
CVE-2024-36674
CVE-2024-27348
unspecified
CVE-2024-24919
CVE-2024-4870
malicious code
CVE-2024-2019
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »