CVE-2022-45329 - AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter

Back Back to CVE browser

HIGH

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter

Published Nov 29, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.79%

Description

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48228
Advisory
https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/search_sql_injection/search_sql_injection.md
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48228		Advisory
https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/search_sql_injection/search_sql_injection.md		ExploitThird Party Advisory