Описание
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows attackers to access database information.
Ссылки
- ExploitThird Party Advisory
- Broken Link
- ExploitThird Party Advisory
- Broken Link
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00267
Низкий
7.5 High
CVSS3
Дефекты
CWE-89
CWE-89
Связанные уязвимости
CVSS3: 7.5
github
около 3 лет назад
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php. This vulnerability allows attackers to access database information.
EPSS
Процентиль: 50%
0.00267
Низкий
7.5 High
CVSS3
Дефекты
CWE-89
CWE-89