CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2022-45550 | 严重9.8 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). | 07/12/2022 |
| CVE-2022-45548 | 高危8.8 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. | 06/12/2022 |
| CVE-2022-43074 | 严重9.8 | AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | 10/11/2022 |
| CVE-2021-44238 | 高危7.2 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, | 01/03/2022 |
| CVE-2020-23686 | 高危8.8 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. | 02/11/2021 |