Show filters
19 Total Results
Displaying 11-19 of 19
Sort by:
Attacker Value
Unknown
CVE-2022-45535
Disclosure Date: November 22, 2022 (last updated December 22, 2024)
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information.
0
Attacker Value
Unknown
CVE-2022-45536
Disclosure Date: November 22, 2022 (last updated December 22, 2024)
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This vulnerability allows attackers to access database information.
0
Attacker Value
Unknown
CVE-2022-45529
Disclosure Date: November 22, 2022 (last updated December 22, 2024)
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\edit_post.php. This vulnerability allows attackers to access database information.
0
Attacker Value
Unknown
CVE-2022-45330
Disclosure Date: November 22, 2022 (last updated December 22, 2024)
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information.
0
Attacker Value
Unknown
CVE-2022-45331
Disclosure Date: November 22, 2022 (last updated December 22, 2024)
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows attackers to access database information.
0
Attacker Value
Unknown
CVE-2022-38305
Disclosure Date: September 13, 2022 (last updated October 08, 2023)
AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
0
Attacker Value
Unknown
CVE-2022-27063
Disclosure Date: April 08, 2022 (last updated October 07, 2023)
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
0
Attacker Value
Unknown
CVE-2022-27062
Disclosure Date: April 08, 2022 (last updated October 07, 2023)
AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Title text field.
0
Attacker Value
Unknown
CVE-2022-27061
Disclosure Date: April 08, 2022 (last updated October 07, 2023)
AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
0
