CVE-2022-46101

AyaCMS v3.1.2 was found to have a code flaw in the ustsql.inc.php file, which allows attackers to cause command execution by inserting malicious code...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

AyaCMS 代码注入漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS v3.1.2, which originated from a code flaw found in the ustsql.inc.php file, which can be exploited by an attacker to cause command execution by inserting malicious code...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

CVE-2021-44238

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE via /aya/module/admin/usttabe.inc.php,...

AyaCMS 跨站请求伪造漏洞

AyaCMS is an extremely simple and free open source Php builder. AyaCMS suffers from a cross-site request forgery vulnerability that stems from the software's lack of checking for cross-site request forgery during an administrator password change. An attacker can exploit this vulnerability to chan...