AeroCMS Project AeroCMS 0.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*
part: a version: 0.0.1 update: *
| Vendor | Aerocms Project (74681269-313a-5498-8b4e-a1feaf4a2ce9) |
|---|---|
| Product | Aerocms (10c4b80c-d524-52b8-b5ed-9942e44d3af5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29847 |
vulnerable | 2026-06-08 06:02:40.717764 |
Details available
AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2023-04-14T00:00:00.000Z
Updated: 2025-02-06T20:39:41.245Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50895 |
vulnerable | 2026-06-08 05:52:03.665421 |
Aero CMS 0.0.1 - SQL Injection
CRITICAL (9.8)
Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, time-based, and UNION query techniques to extract sensitive database information and potentially compromise the system.
Published: 2026-01-13T22:51:43.747Z
Updated: 2026-07-15T01:24:43.698Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46137 |
vulnerable | 2026-06-08 05:50:37.722285 |
Details available
AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.
Published: 2022-12-16T00:00:00.000Z
Updated: 2025-04-17T17:35:30.997Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46135 |
vulnerable | 2026-06-08 05:50:37.721701 |
Details available
In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.
Published: 2022-12-16T00:00:00.000Z
Updated: 2025-04-17T17:36:20.855Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46061 |
vulnerable | 2026-06-08 05:50:37.678923 |
Details available
AeroCMS v0.0.1 is vulnerable to ClickJacking.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T03:08:29.708Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46059 |
vulnerable | 2026-06-08 05:50:37.678512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46058 |
vulnerable | 2026-06-08 05:50:37.677984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46051 |
vulnerable | 2026-06-08 05:50:37.677483 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46047 |
vulnerable | 2026-06-08 05:50:37.676968 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45536 |
vulnerable | 2026-06-08 05:50:36.490125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45535 |
vulnerable | 2026-06-08 05:50:36.489587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45529 |
vulnerable | 2026-06-08 05:50:36.489122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45331 |
vulnerable | 2026-06-08 05:50:36.054433 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45330 |
vulnerable | 2026-06-08 05:50:36.053846 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45329 |
vulnerable | 2026-06-08 05:50:36.053282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38305 |
vulnerable | 2026-06-08 05:47:16.108699 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27063 |
vulnerable | 2026-06-08 05:41:54.800939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27062 |
vulnerable | 2026-06-08 05:41:54.800606 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27061 |
vulnerable | 2026-06-08 05:41:54.800063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.