Approved changes feed: RSS · Atom
cpe:2.3:a:megatkc:aero_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Megatkc (fb2f5b17-22f9-5656-a65a-3404bb7e0e04) |
|---|---|
| Product | Aero Cms (a8556df0-1439-564e-a530-34a5705b97f5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-50944 |
vulnerable | 2026-06-08 05:52:03.754145 |
Aero CMS 0.0.1 PHP Code Injection via posts.php
HIGH (8.8)
Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endpoint with source=add_post parameter, and the uploaded files are executed by the server.
Published: 2026-05-10T12:12:45.272Z
Updated: 2026-07-15T01:24:45.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50895 |
vulnerable | 2026-06-08 05:52:03.664453 |
Aero CMS 0.0.1 - SQL Injection
CRITICAL (9.8)
Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, time-based, and UNION query techniques to extract sensitive database information and potentially compromise the system.
Published: 2026-01-13T22:51:43.747Z
Updated: 2026-07-15T01:24:43.698Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.