Aerocms Project

Aerocms

19 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2022-45535

Exploit
  • EPSS 0.08%
  • Published 22.11.2022 21:15:11
  • Last modified 25.04.2025 21:15:36

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information.

4.9

CVE-2022-45529

Exploit
  • EPSS 0.08%
  • Published 22.11.2022 21:15:11
  • Last modified 25.04.2025 21:15:35

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\edit_post.php. This vulnerability allows attackers to access database information.

7.5

CVE-2022-45331

Exploit
  • EPSS 0.11%
  • Published 22.11.2022 21:15:10
  • Last modified 25.04.2025 21:15:35

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows attackers to access database information.

7.5

CVE-2022-45330

Exploit
  • EPSS 0.11%
  • Published 22.11.2022 21:15:10
  • Last modified 25.04.2025 21:15:35

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information.

8.8

CVE-2022-38305

Exploit
  • EPSS 0.74%
  • Published 13.09.2022 23:15:08
  • Last modified 21.11.2024 07:16:13

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

6.5

CVE-2022-38812

Exploit
  • EPSS 0.23%
  • Published 31.08.2022 18:15:08
  • Last modified 21.11.2024 07:17:07

AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.

7.2

CVE-2022-27061

Exploit
  • EPSS 3.08%
  • Published 08.04.2022 09:15:11
  • Last modified 21.11.2024 06:55:03

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

6.1

CVE-2022-27063

Exploit
  • EPSS 0.7%
  • Published 08.04.2022 09:15:11
  • Last modified 21.11.2024 06:55:03

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text f...

4.8

CVE-2022-27062

Exploit
  • EPSS 0.68%
  • Published 08.04.2022 09:15:11
  • Last modified 21.11.2024 06:55:03

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.