Approved changes feed: RSS · Atom

cpe:2.3:a:ayacms_project:ayacms:3.1.2:*:*:*:*:*:*:*

part: a version: 3.1.2 update: *

VendorAyacms Project (ce33738e-787c-57d4-a8c9-795bb82b3214)
ProductAyacms (bfdfb580-b1ff-5f33-b17b-51cd03e107e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/loadream/ayacms purl2cpe 2026-06-01 10:11:14.158524

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-48116 vulnerable 2026-06-08 05:50:41.208290 Details available
AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php.
Published: 2023-01-27T00:00:00.000Z
Updated: 2025-03-28T15:47:41.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47926 vulnerable 2026-06-08 05:50:40.975260 Details available
AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php
Published: 2022-12-22T00:00:00.000Z
Updated: 2025-04-15T14:46:45.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46102 vulnerable 2026-06-08 05:50:37.712967 Details available
AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php
Published: 2022-12-22T00:00:00.000Z
Updated: 2025-04-15T14:59:17.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46101 vulnerable 2026-06-08 05:50:37.712395 Details available
AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code.
Published: 2022-12-22T00:00:00.000Z
Updated: 2025-04-15T15:00:20.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45550 vulnerable 2026-06-08 05:50:36.508233 Details available
AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).
Published: 2022-12-07T00:00:00.000Z
Updated: 2025-04-23T17:30:48.476Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45548 vulnerable 2026-06-08 05:50:36.507759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43074 vulnerable 2026-06-08 05:49:31.105653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44238 vulnerable 2026-06-08 05:36:45.604496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23686 vulnerable 2026-06-08 05:22:32.052855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.