CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2022-45550 | 심각9.8 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). | 07/12/2022 |
| CVE-2022-45548 | 높음8.8 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. | 06/12/2022 |
| CVE-2022-43074 | 심각9.8 | AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | 10/11/2022 |
| CVE-2021-44238 | 높음7.2 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, | 01/03/2022 |
| CVE-2020-23686 | 높음8.8 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. | 02/11/2021 |