Aquila-cms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Aquila-cms records in CISA KEV

No Aquila-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aquilacms 2 records MEDIUM

Records

2 records

TI-2024-32427 CVE-2024-48573 · GHSA-4f8q-56wq-r4gw

A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated…

MEDIUM 51

A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and administrator account passwords via the "Reset password" feature.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01029 Published 2024-10-29 No fix listed CWE-89

TI-2024-32426 CVE-2024-48572 · GHSA-8798-5c83-39gj

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated…

LOW 30

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00441 Published 2024-10-29 No fix listed CWE-276

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0