Vulnerabilities

TI-2022-23815 CVE-2022-48116 · GHSA-mm7r-fvvc-9q35

AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via…

LOW 37

AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01416 Published 2023-01-27 No fix listed CWE-94

TI-2022-23740 CVE-2022-47926 · GHSA-mcxp-g82x-32fg

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php

MEDIUM 50

AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00829 Published 2022-12-22 No fix listed CWE-88

TI-2022-22767 CVE-2022-46102 · GHSA-p377-qm42-6xph

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php

MEDIUM 50

AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00767 Published 2022-12-22 No fix listed CWE-434

TI-2022-22766 CVE-2022-46101 · GHSA-76w3-2xmj-8wr3

AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows…

MEDIUM 44

AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02124 Published 2022-12-22 No fix listed CWE-94

TI-2022-22490 CVE-2022-45550 · GHSA-x8rw-qrmg-7cmp

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).

MEDIUM 52

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01594 Published 2022-12-07 No fix listed CWE-94

TI-2022-22489 CVE-2022-45548 · GHSA-p5p4-pp89-v937

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.

MEDIUM 42

AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00824 Published 2022-12-06 No fix listed CWE-434

TI-2022-21017 CVE-2022-43074 · GHSA-xfrj-q2wc-jq8h

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the…

MEDIUM 51

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01206 Published 2022-11-10 No fix listed CWE-434

TI-2021-19926 CVE-2021-44238 · GHSA-5f82-jq9j-xfr4

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,

LOW 35

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01887 Published 2022-03-01 No fix listed CWE-94

TI-2020-14640 CVE-2020-23686 · GHSA-8f54-mjwx-ghw6

Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to…

LOW 39

Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00587 Published 2021-11-02 No fix listed CWE-352

Vulnerabilities

Filters