CVE-2022-50895

概要

参考情報

• nu11secur1ty/CVE-nu11secur1ty · Exploit
• web.archive.org/web/20211008092238/https://github.com/MegaTKC/AeroCMS · Exploit
• exploit-db.com/exploits/51022 · Exploit
• vulncheck.com/advisories/aero-cms-sql-injection · Third Party Advisory

aerocms のその他の脆弱性

• CVE-2023-29847中 5.4AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_conte…
• CVE-2022-46137高 7.5AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.
• CVE-2022-46135高 7.2In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshe…
• CVE-2022-46051高 7.2The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
• CVE-2022-46059中 6.5AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).