3 matches found
CVE-2022-50944
Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endpoint with source=addpost parameter, a...
8.8CVSS6.1AI score0.00347EPSS
SaveExploits0References3Affected Software1
CVE-2020-0806
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0772...
7.8CVSS7.1AI score0.00778EPSS
SaveExploits0References1
20