CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fstdown.inc.php...

PT-2022-27738 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to a code flaw in the ust sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. Recommendations: For AyaCMS version 3.1.2, consider restricting...

CVE-2022-46101

AyaCMS v3.1.2 was found to have a code flaw in the ustsql.inc.php file, which allows attackers to cause command execution by inserting malicious code...

CVE-2022-46102

AyaCMS 3.1.2 is vulnerable to arbitrary file upload via /aya/module/admin/fst_down.inc.php. The provided documents identify the vulnerable endpoint but do not disclose the exact root cause, affected components beyond the path, or concrete remediation details. The CVSS metrics in the primary entry...

AyaCMS 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version v3.1.2, which originates from uploading arbitrary files via /aya/module/admin/fstdown.inc.php...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

Remote code execution

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

PT-2022-27573 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue concerns Remote Code Execution RCE, allowing for potentially malicious code to be executed remotely. Recommendations: For AyaCMS version 3.1.2, at the moment, there is no information about a newer...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

AyaCMS 注入漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS version 3.1.2, which stems from vulnerability to Remote Code Execution RCE attacks...

CVE-2022-45550

CVE-2022-45550 affects AyaCMS 3.1.2 and is described as a Remote Code Execution (RCE) vulnerability. The NVD/CVSS data show a high-severity impact (CVSS v3.1: 9.8, Network attack vector, no user interaction required, high confidentiality/integrity/availability impact). The provided documents do n...

CVE-2022-45550

AyaCMS 3.1.2 is vulnerable to Remote Code Execution RCE...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

PT-2022-27571 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to an Arbitrary File Upload problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

CVE-2022-45548

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability...

AyaCMS和Upload 代码问题漏洞

AyaCMS is an extremely simple and free open source PHP website builder. A security vulnerability exists in AyaCMS v3.1.2. An attacker can use this vulnerability to upload arbitrary files...

CVE-2022-45548

CVE-2022-45548 affects AyaCMS v3.1.2 with an Arbitrary File Upload vulnerability. CVSS v3.1 base score 8.8 (HIGH) indicates network access, low attack complexity, and requires low privileges with no user interaction; impact to confidentiality, integrity, and availability is HIGH. The connected do...

AyaCMS arbitrary file upload vulnerability

AyaCMS is an extremely simple and free open source PHP website builder. v3.1.2 of AyaCMS contains a security vulnerability that originates from an arbitrary file upload vulnerability found via the component /admin/fstupload.inc.php. An attacker could use this vulnerability to execute arbitrary co...