CVE-2022-45331
Published on: Not Yet Published
Last Modified on: 11/23/2022 04:04:00 PM UTC
Certain versions of Aerocms from Aerocms Project contain the following vulnerability:
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows attackers to access database information.
- CVE-2022-45331 has been assigned by
[email protected] to track the vulnerability - currently rated as HIGH severity.
CVSS3 Score: 7.5 - HIGH
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| NETWORK | LOW | NONE | NONE |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | HIGH | NONE | NONE |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| 页面不存在 - 儒道易行 | rdyx0.github.io text/html Inactive LinkNot Archived |
MISC rdyx0.github.io/2018/09/03/AeroCMS-v0.0.1-SQLi%20post_sql_injectin/ |
| CVE/post_sql_injection.md at master · rdyx0/CVE · GitHub | github.com text/html |
MISC github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/post_sql_injection/post_sql_injection.md |
There are currently no QIDs associated with this CVE
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Aerocms Project | Aerocms | 0.0.1 | All | All | All |
- cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*:
No vendor comments have been submitted for this CVE
Social Mentions
| Source | Title | Posted (UTC) |
|---|---|---|
 @CVEreport |
CVE-2022-45331 : AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \… twitter.com/i/web/status/1… | 2022-11-22 21:04:55 |
| @Robo_Alerts |
Potentially Critical CVE Detected! CVE-2022-45331 AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerab… twitter.com/i/web/status/1… | 2022-11-22 21:56:00 |
 /r/netcve |
CVE-2022-45331 | 2022-11-22 22:38:15 |