Lucene search
+L

4570 matches found

CNVD
CNVD
•added 2022/11/24 12:00 a.m.•71 views

AeroCMS SQL Injection Vulnerability

AeroCMS is a content management system from AeroCMS, Inc. A security vulnerability exists in AeroCMS v0.0.1, which stems from the edit parameter of its admincategories.php component allowing an attacker to implement SQL injection resulting in access to database information. No detailed...

4.9CVSS3.2AI score0.00857EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/11/23 12:00 a.m.•21 views

PT-2022-23709 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands due to a Command Injection vulnerability. Recommendations: A...

7.2CVSS7.5AI score0.09192EPSS
SaveExploits0References7
NVD
NVD
•added 2022/11/22 9:15 p.m.•47 views

CVE-2022-45536

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

4.9CVSS0.00894EPSS
SaveExploits1References2
Prion
Prion
•added 2022/11/22 9:15 p.m.•25 views

Sql injection

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

3.3CVSS5.5AI score0.00894EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2022/11/22 9:15 p.m.•30 views

Sql injection

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...

3.3CVSS5.6AI score0.00857EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2022/11/22 9:15 p.m.•26 views

Sql injection

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

5CVSS7.7AI score0.00838EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/22 12:00 a.m.•5 views

CVE-2022-45536: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

4.9CVSS5.9AI score0.00894EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/22 12:00 a.m.•10 views

CVE-2022-45331: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

7.5CVSS5.9AI score0.00838EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/22 12:00 a.m.•8 views

CVE-2022-45529: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...

4.9CVSS5.9AI score0.00809EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•55 views

CVE-2022-45529

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...

5.7AI score0.00809EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•49 views

CVE-2022-45536

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

5.7AI score0.00894EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/11/22 12:00 a.m.•12 views

CVE-2022-45529

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...

5.4AI score0.00809EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/11/22 12:00 a.m.•10 views

CVE-2022-45535

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...

5.4AI score0.00857EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/11/22 12:00 a.m.•14 views

CVE-2022-45330

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information...

7.7AI score0.00838EPSS
SaveExploits1References2
Mend
Mend
•added 2022/11/22 12:00 a.m.•13 views

CVE-2022-45330

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information...

8.7CVSS0.00838EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/11/22 12:00 a.m.•20 views

PT-2022-27469 · Aerocms · Aerocms

Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to access database information through a SQL Injection vulnerability via the Category parameter at the "category.php" endpoint. This vulnerability enables unauthorized access to...

7.5CVSS7.9AI score0.00838EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•51 views

CVE-2022-45535

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...

5.7AI score0.00857EPSS
SaveExploits1References2
CVE
CVE
•added 2022/11/22 12:00 a.m.•91 views

CVE-2022-45330

CVE-2022-45330 concerns AeroCMS v0.0.1, where a SQL injection is exposed via the Category parameter in the category.php endpoint. The vulnerability could allow an attacker to access database information. Multiple sources confirm the issue, all describing the same vector without stating an officia...

7.5CVSS7.6AI score0.00838EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/11/22 12:00 a.m.•25 views

AeroCMS SQL Injection Vulnerability

AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a security vulnerability that stems from the pid parameter of its post.php component that allows an attacker to implement a SQL injection resulting in access to database information...

7.5CVSS7.5AI score0.00838EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•53 views

CVE-2022-45330

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vulnerability allows attackers to access database information...

7.9AI score0.00838EPSS
SaveExploits1References2
Rows per page
Query Builder