medium6.5
CVE-2022-38812
AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
Impact
AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aerocms Project | Aerocms | Version 0.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi
- https://www.nu11secur1ty.com/2022/08/aerocms-v001-sqli.html
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi
- https://www.nu11secur1ty.com/2022/08/aerocms-v001-sqli.html