194 matches found
AeroCMS 跨站请求伪造漏洞
AeroCMS is a content management system from AeroCMS Inc. in the United States. A security vulnerability exists in AeroCMS version v0.0.1, which stems from vulnerability to cross-site request forgery CSRF attacks...
PT-2022-27726 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue concerns ClickJacking, a type of attack where an attacker tricks a user into clicking on a malicious link or button that appears legitimate. No information is provided about the estimated number of...
CVE-2022-46047
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...
CVE-2022-46059
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery CSRF...
PT-2022-27724 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided about the estimated...
CVE-2022-46058
CVE-2022-46058 affects AeroCMS v0.0.1, with a cross-site scripting (XSS) vulnerability exploitable via add_post.php. The issue allows an attacker to inject a crafted payload into the Comments text field to execute arbitrary web scripts or HTML. This is documented across multiple sources (NVD, RH ...
AeroCMS SQL注入漏洞
AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a SQL injection vulnerability that stems from the vulnerability of the Approve parameter of the CMS system to SQL injection attacks. An attacker can exploit this vulnerability by insertin...
PT-2022-27722 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue concerns the approve parameter in the AeroCMS CMS system, which is susceptible to SQL injection attacks. This allows attackers to potentially execute malicious SQL code. Recommendations: For AeroCM...
CVE-2022-46047
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...
PT-2022-27723 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field in the add post.php file. This enables the execution of malicious code,...
CVE-2022-46058
AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
CVE-2022-46058
AeroCMS v0.0.1 was discovered to contain a cross-site scripting XSS vulnerability via addpost.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field...
AeroCMS 安全漏洞
AeroCMS is a content management system from AeroCMS Inc. in the United States. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from vulnerability to clickjacking attacks...
CVE-2022-46061
CVE-2022-46061 : AeroCMS v0.0.1 is reported vulnerable to ClickJacking. The connected sources identify the affected software/version and classify the impact as low for confidentiality and integrity, with no availability impact; user interaction is required for exploitation, per the CVSS data. No ...
CVE-2022-46059
AeroCMS v0.0.1 is vulnerable to Cross-Site Request Forgery (CSRF). The flaw affects the AeroCMS 0.0.1 release and is described across multiple sources; CVSS v3.1 indicates a MEDIUM base score (6.5) with I ntegrity impact HIGH and user interaction required. Root cause details are not explicitly pr...
CVE-2022-46051
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks...
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking...
CVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking...
CVE-2022-46047
CVE-2022-46047 affects AeroCMS v0.0.1 and is a SQL Injection via the delete parameter. The flaw can be triggered remotely over the network with low attack complexity but requiring high privileges, risking confidentiality (HIGH) while other impacts are not indicated. Root cause: improper handling ...
