CVE-2022-47926

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fstdel.inc.php...

AyaCMS 参数注入漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version 3.1.2, which can be exploited by easily deleting files via /aya/module/admin/fstdel.inc.php...

CVE-2022-47926

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php. Affected component: AyaCMS (PHP web app). Root cause: endpoint allows deletion of files; impact is high (potential loss/overwrite of files). Exploitation status is not detailed in the provided documents. Remediatio...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to arbitrary file upload via /aya/module/admin/fst_down.inc.php. The provided documents identify the vulnerable endpoint but do not disclose the exact root cause, affected components beyond the path, or concrete remediation details. The CVSS metrics in the primary entry...

CVE-2022-46101

AyaCMS v3.1.2 has a code flaw in ust_sql.inc.php that enables command execution via injected code. The vulnerability is described across multiple sources (e.g., Red Hat, CVE records, and PT-Security) with a CVSS v3.1 base score of 8.8 (HIGH) and an attack vector of NETWORK, requiring LOW privileg...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

Remote code execution

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

AyaCMS 注入漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version 3.1.2, which stems from vulnerability to Remote Code Execution RCE attacks...

PT-2022-27573 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue concerns Remote Code Execution RCE, allowing for potentially malicious code to be executed remotely. Recommendations: For AyaCMS version 3.1.2, at the moment, there is no information about a newer...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

CVE-2022-45550

CVE-2022-45550 affects AyaCMS 3.1.2 and is described as a Remote Code Execution (RCE) vulnerability. The NVD/CVSS data show a high-severity impact (CVSS v3.1: 9.8, Network attack vector, no user interaction required, high confidentiality/integrity/availability impact). The provided documents do n...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

AyaCMS和Upload 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS v3.1.2. An attacker can use this vulnerability to upload arbitrary files...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

PT-2022-27571 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to an Arbitrary File Upload problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

CVE-2022-45548

CVE-2022-45548 affects AyaCMS v3.1.2 with an Arbitrary File Upload vulnerability. CVSS v3.1 base score 8.8 (HIGH) indicates network access, low attack complexity, and requires low privileges with no user interaction; impact to confidentiality, integrity, and availability is HIGH. The connected do...

AyaCMS arbitrary file upload vulnerability

AyaCMS is an extremely simple and free open source PHP website builder. v3.1.2 of AyaCMS contains a security vulnerability that originates from an arbitrary file upload vulnerability found via the component /admin/fstupload.inc.php. An attacker could use this vulnerability to execute arbitrary co...