4570 matches found
AeroCMS SQL Injection Vulnerability
AeroCMS is a content management system from AeroCMS, Inc. A security vulnerability exists in AeroCMS v0.0.1, which stems from the edit parameter of its admincategories.php component allowing an attacker to implement SQL injection resulting in access to database information. No detailed...
PT-2022-23709 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands due to a Command Injection vulnerability. Recommendations: A...
CVE-2022-45536
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...
Sql injection
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...
Sql injection
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...
Sql injection
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...
CVE-2022-45536: Improper Neutralization of Special Elements used in an SQL Command
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...
CVE-2022-45331: Improper Neutralization of Special Elements used in an SQL Command
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...
CVE-2022-45529: Improper Neutralization of Special Elements used in an SQL Command
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...
CVE-2022-45529
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...
CVE-2022-45536
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...
CVE-2022-45529
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...
CVE-2022-45535
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...
CVE-2022-45330
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information...
CVE-2022-45330
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information...
PT-2022-27469 · Aerocms · Aerocms
Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to access database information through a SQL Injection vulnerability via the Category parameter at the "category.php" endpoint. This vulnerability enables unauthorized access to...
CVE-2022-45535
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...
CVE-2022-45330
CVE-2022-45330 concerns AeroCMS v0.0.1, where a SQL injection is exposed via the Category parameter in the category.php endpoint. The vulnerability could allow an attacker to access database information. Multiple sources confirm the issue, all describing the same vector without stating an officia...
AeroCMS SQL Injection Vulnerability
AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from the pid parameter of its post.php component that allows an attacker to implement a SQL injection resulting in access to database information...