EUVD-2022-48230

Malicious code in bioql PyPI...

EUVD-2022-48896

Malicious code in bioql PyPI...

EUVD-2022-48973

Malicious code in bioql PyPI...

EUVD-2022-31601

Malicious code in bioql PyPI...

EUVD-2022-31603

Malicious code in bioql PyPI...

EUVD-2022-31602

Malicious code in bioql PyPI...

EUVD-2022-48975

Malicious code in bioql PyPI...

CVE-2022-46135

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=editpost , through which we can upload webshell and control the web server...

CVE-2022-46059

AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery CSRF...

CVE-2022-45536

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

CVE-2022-46137

AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information remote. The component is: AeroCMS v0.0.1...

CVE-2022-27063

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting XSS vulnerability via viewallcomments.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...

CVE-2022-46137

AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information remote. The component is: AeroCMS v0.0.1...

CVE-2022-46135

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=editpost , through which we can upload webshell and control the web server...

PT-2022-27755 · Aerocms · Aerocms

Name of the Vulnerable Software and Affected Versions: AeroCms version 0.0.1 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability is located at the "/admin/posts.php?source=edit post" API endpoint, which allows uploading a webshell and potentially...

CVE-2022-46061

AeroCMS v0.0.1 is vulnerable to ClickJacking...

CVE-2022-46047

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

Sql injection

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

Design/Logic Flaw

AeroCMS v0.0.1 is vulnerable to ClickJacking...

CVE-2022-46061

AeroCMS v0.0.1 is vulnerable to ClickJacking...