194 matches found
AeroCMS 代码问题漏洞
AeroCMS is a content management system from the American company AeroCMS. AeroCMS v0.0.1 version of a security vulnerability, the vulnerability stems from /admin/posts.php?source=editpost there are arbitrary file uploads, an attacker can take advantage of the vulnerability to upload a webshell,...
CVE-2022-46051
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks...
CVE-2022-46051
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks...
Sql injection
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks...
CVE-2022-46059
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2022-46059
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery CSRF...
Cross site request forgery (csrf)
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery CSRF...
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking...
CVE-2022-46058
AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking...
CVE-2022-46047
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...
CVE-2022-46058
AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
CVE-2022-46047
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...
Cross site scripting
AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
Design/Logic Flaw
AeroCMS v0.0.1 is vulnerable to ClickJacking...
Sql injection
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...
AeroCMS SQL注入漏洞
AeroCMS is a content management system from AeroCMS Inc. in the United States. A security vulnerability exists in AeroCMS version v0.0.1, which stems from the presence of a SQL injection by deleting parameters...
CVE-2022-46051
CVE-2022-46051 affects AeroCMS v0.0.1. The vulnerability resides in the approve parameter, making the CMS susceptible to SQL injection, with impact on confidentiality, integrity, and availability per CVSS 3.1 (base 7.2, HIGH). Documented references consistently describe AeroCMS v0.0.1 and the SQL...
