CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2022-45550 | KRITISCH9.8 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). | 07/12/2022 |
| CVE-2022-45548 | HOCH8.8 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. | 06/12/2022 |
| CVE-2022-43074 | KRITISCH9.8 | AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | 10/11/2022 |
| CVE-2021-44238 | HOCH7.2 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, | 01/03/2022 |
| CVE-2020-23686 | HOCH8.8 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. | 02/11/2021 |