Vulnerabilities

TI-2022-26349 CVE-2022-50895 · GHSA-c4f5-qmmp-6rxm

Aero CMS 0.0.1 - SQL Injection

MEDIUM 45

Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00658 Published 2026-01-13 No fix listed CWE-89

TI-2023-14042 CVE-2023-29847 · GHSA-7546-wrqf-3fph

AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS)…

MEDIUM 58

AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00384 Published 2023-04-14 No fix listed CWE-79

TI-2022-22782 CVE-2022-46137 · GHSA-2rqg-gm2p-h7rr

AeroCMS v0.0.1 is vulnerable to Directory Traversal.

MEDIUM 42

AeroCMS v0.0.1 is vulnerable to Directory Traversal.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01485 Published 2022-12-16 No fix listed CWE-22

TI-2022-22781 CVE-2022-46135 · GHSA-h464-v7f9-fwjm

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at…

LOW 36

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01237 Published 2022-12-16 No fix listed CWE-434

TI-2022-22749 CVE-2022-46061 · GHSA-qmwr-gvh9-jxwq

AeroCMS v0.0.1 is vulnerable to ClickJacking.

LOW 28

AeroCMS v0.0.1 is vulnerable to ClickJacking.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00489 Published 2022-12-13 No fix listed CWE-1021

TI-2022-22748 CVE-2022-46059 · GHSA-hgj7-qcr6-r4p2

AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).

LOW 29

AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00343 Published 2022-12-13 No fix listed CWE-352

TI-2022-22747 CVE-2022-46058 · GHSA-47ff-52qj-c728

AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via…

LOW 23

AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00479 Published 2022-12-13 No fix listed CWE-79

TI-2022-22746 CVE-2022-46051 · GHSA-jxw4-ffc7-vh76

The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.

LOW 35

The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00896 Published 2022-12-13 No fix listed CWE-89

TI-2022-22745 CVE-2022-46047 · GHSA-qgrx-xpfw-g4qp

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.

LOW 24

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00792 Published 2022-12-13 No fix listed CWE-89

TI-2022-22306 CVE-2022-45329 · GHSA-9p2g-4957-h2cg

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search…

MEDIUM 40

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00816 Published 2022-11-29 No fix listed CWE-89

TI-2022-22479 CVE-2022-45536 · GHSA-fg2f-j7rp-247h

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id…

LOW 26

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00894 Published 2022-11-22 No fix listed CWE-89

TI-2022-22478 CVE-2022-45535 · GHSA-p5m9-4j59-gqpc

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit…

LOW 24

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00857 Published 2022-11-22 No fix listed CWE-89

TI-2022-22477 CVE-2022-45529 · GHSA-q43r-7xx8-jwr7

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the…

LOW 24

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\edit_post.php.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00809 Published 2022-11-22 No fix listed CWE-89

TI-2022-22308 CVE-2022-45331 · GHSA-6q4m-r7w6-3f7x

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id…

MEDIUM 40

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00838 Published 2022-11-22 No fix listed CWE-89

TI-2022-22307 CVE-2022-45330 · GHSA-mq8h-fhgg-8mwv

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category…

MEDIUM 40

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00838 Published 2022-11-22 No fix listed CWE-89

TI-2022-17962 CVE-2022-38305 · GHSA-x83r-6vrr-539w

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the…

MEDIUM 41

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01241 Published 2022-09-13 No fix listed CWE-434

TI-2022-18299 CVE-2022-38812 · GHSA-g57h-8f8w-pj8x

AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.

LOW 34

AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02681 Published 2022-08-31 No fix listed CWE-89

TI-2022-10241 CVE-2022-27063 · GHSA-43mx-8xm7-7p46

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS)…

LOW 30

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01466 Published 2022-04-08 No fix listed CWE-79

TI-2022-10240 CVE-2022-27062 · GHSA-fx99-v675-68jh

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS)…

LOW 24

AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01099 Published 2022-04-08 No fix listed CWE-79

TI-2022-10239 CVE-2022-27061 · GHSA-m327-462q-r35c

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the…

LOW 37

AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02673 Published 2022-04-08 No fix listed CWE-434

Vulnerabilities

Filters