Known Vulnerabilities for products from Aerocms Project
Listed below are 19 of the newest known vulnerabilities associated with the vendor "Aerocms Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-29847 json | AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author an... | 5.4 - MEDIUM | 2023-04-14 | 2023-04-21 |
| CVE-2022-46137 json | AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: ... | 7.5 - HIGH | 2022-12-16 | 2022-12-21 |
| CVE-2022-46135 json | In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we ca... | 7.2 - HIGH | 2022-12-16 | 2022-12-22 |
| CVE-2022-46061 json | AeroCMS v0.0.1 is vulnerable to ClickJacking. | 6.1 - MEDIUM | 2022-12-13 | 2022-12-16 |
| CVE-2022-46059 json | AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). | 6.5 - MEDIUM | 2022-12-13 | 2022-12-16 |
| CVE-2022-46058 json | AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allo... | 4.8 - MEDIUM | 2022-12-13 | 2022-12-15 |
| CVE-2022-46051 json | The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks. | 7.2 - HIGH | 2022-12-13 | 2022-12-15 |
| CVE-2022-46047 json | AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter. | 4.9 - MEDIUM | 2022-12-13 | 2022-12-15 |
| CVE-2022-45536 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\post_comments.php. This... | 4.9 - MEDIUM | 2022-11-22 | 2022-11-23 |
| CVE-2022-45535 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This ... | 4.9 - MEDIUM | 2022-11-22 | 2022-11-23 |
| CVE-2022-45529 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the post_category_id parameter at \admin\includes\... | 4.9 - MEDIUM | 2022-11-22 | 2022-11-23 |
| CVE-2022-45331 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerabilit... | 7.5 - HIGH | 2022-11-22 | 2022-11-23 |
| CVE-2022-45330 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php. This vuln... | 7.5 - HIGH | 2022-11-22 | 2022-11-23 |
| CVE-2022-45329 json | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows at... | 7.5 - HIGH | 2022-11-29 | 2022-11-30 |
| CVE-2022-38812 json | AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter. | 6.5 - MEDIUM | 2022-08-31 | 2022-09-07 |
| CVE-2022-38305 json | AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vu... | 8.8 - HIGH | 2022-09-13 | 2022-09-17 |
| CVE-2022-27063 json | AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via view_all_comments.php. This vu... | 6.1 - MEDIUM | 2022-04-08 | 2022-04-13 |
| CVE-2022-27062 json | AeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via add_post.php. This vulnerabili... | 4.8 - MEDIUM | 2022-04-08 | 2022-04-13 |
| CVE-2022-27061 json | AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin p... | 7.2 - HIGH | 2022-04-08 | 2022-04-13 |