CVE-2022-27063

Mô tả

Tham khảo

• packetstormsecurity.com/files/166649/AeroCMS-0.0.1-Cross-Site-Scripting.html · Exploit
• drive.google.com/file/d/1GxOyX1JkG0trfdaCLfe06TR6WLIGoUXE/view · Exploit
• D4rkP0w4r/AeroCMS-Comment-Stored_XSS-Poc · Exploit

Lỗ hổng khác của aerocms

• CVE-2022-50895NGHIÊM TRỌNG 9.8Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries. Attacker…
• CVE-2023-29847TRUNG BÌNH 5.4AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_conte…
• CVE-2022-46137CAO 7.5AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.
• CVE-2022-46135CAO 7.2In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshe…
• CVE-2022-46051CAO 7.2The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.