CVE-2022-43074

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fstupload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43074

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fstupload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

Privilege escalation

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fstupload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

AyaCMS 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. v3.1.2 of AyaCMS contains a security vulnerability that originates from an arbitrary file upload vulnerability found via the component /admin/fstupload.inc.php. An attacker could use this vulnerability to execute arbitrary co...

PT-2022-26739 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /admin/fst upload.inc.php component. Recommendations: For AyaCMS version...

CVE-2022-43074

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fstupload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43074

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fstupload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-43074

CVE-2022-43074 affects AyaCMS v3.1.2 with an arbitrary file upload vulnerability in the /admin/fst_upload.inc.php component. The issue permits execution of arbitrary code via a crafted PHP file, per the primary CVE description. The associated metrics indicate a 9.8 base score (CRITICAL) under CVS...

AyaCMS Remote Code Execution Vulnerability

AyaCms is an extremely simple and free open source Php website builder. A remote code execution vulnerability exists in AyaCMS version 3.1.2, which stems from a failure to properly filter special elements in the /aya/module/admin/usttabe.inc.php page. An attacker could exploit this vulnerability ...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

Remote code execution

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution via /aya/module/admin/ust_tab_e.inc.php. The underlying issue is improper filtering of certain elements on that admin page, leading to RCE. Attack vector is network and no user interaction required per CVSS 3.1 (base score 7.2, HIGH). No explici...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

AyaCms 代码注入漏洞

AyaCms is an extremely simple and free open source Php website builder. A remote code execution vulnerability exists in AyaCMS version 3.1.2, which stems from a failure to properly filter special elements in the /aya/module/admin/usttabe.inc.php page. An attacker could exploit this vulnerability ...

AyaCMS Cross-Site Request Forgery Vulnerability

AyaCMS is an extremely simple and free open source Php builder. AyaCMS suffers from a cross-site request forgery vulnerability that stems from the software's lack of checking for cross-site request forgery during an administrator password change. An attacker can exploit this vulnerability to chan...

CVE-2020-23686

Cross site request forgery CSRF vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts...

CVE-2020-23686

Cross site request forgery CSRF vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts...

Cross site request forgery (csrf)

Cross site request forgery CSRF vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts...

CVE-2020-23686

Cross site request forgery CSRF vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts...