Known Vulnerabilities for Aerocms by Aerocms Project
Listed below are 10 of the newest known vulnerabilities associated with "Aerocms" by "Aerocms Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-29847 json | AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author an... | 5.4 - MEDIUM | 2023-04-14 | 2023-04-21 |
| CVE-2022-46137 json | AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: ... | 7.5 - HIGH | 2022-12-16 | 2022-12-21 |
| CVE-2022-46135 json | In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we ca... | 7.2 - HIGH | 2022-12-16 | 2022-12-22 |
| CVE-2022-46061 json | AeroCMS v0.0.1 is vulnerable to ClickJacking. | 6.1 - MEDIUM | 2022-12-13 | 2022-12-16 |
| CVE-2022-46059 json | AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). | 6.5 - MEDIUM | 2022-12-13 | 2022-12-16 |
| CVE-2022-46058 json | AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allo... | 4.8 - MEDIUM | 2022-12-13 | 2022-12-15 |
| CVE-2022-46051 json | The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks. | 7.2 - HIGH | 2022-12-13 | 2022-12-15 |
| CVE-2022-46047 json | AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter. | 4.9 - MEDIUM | 2022-12-13 | 2022-12-15 |
| CVE-2022-45536 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This... | 4.9 - MEDIUM | 2022-11-22 | 2022-11-23 |
| CVE-2022-45535 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This ... | 4.9 - MEDIUM | 2022-11-22 | 2022-11-23 |