CVE-2022-38812

creationtimestamp| type| source ---|---|--- 2022-08-31 22:37:02+00:00| seen| https://t.me/cibsecurity/49140...

CVE-2022-38812

AeroCMS 0.1.1 is affected by a SQL injection in the author parameter. The root cause, as described in the connected Nuclei template, is an unsanitized author input that allows arbitrary SQL execution. The documented impact states authenticated attackers can extract sensitive data (e.g., database ...