-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
NVD Vulnerability Details :
CVE-2022-46051
Modified
More Info
Official Page
Source
-
cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At
-
13 Dec, 2022 | 16:15
Updated At
-
22 Apr, 2025 | 15:16
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
N/A
Metrics
Type
Version
Base score
Base severity
Vector
Primary
3.1
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary
3.1
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CPE Matches
aerocms_project
aerocms_project
>>
aerocms
>>
0.0.1
cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*
Load More
Weaknesses
CWE ID
Type
Source
CWE-89
Primary
nvd@nist.gov
CWE-89
Secondary
134c704f-9b21-4f2e-91b3-4a467353bcc0
Evaluator Description
Evaluator Impact
Evaluator Solution
Vendor Statements
References
Hyperlink
Source
Resource
https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/view_all_comments_update/view_all_comments_update.MD
cve@mitre.org
Exploit
Third Party Advisory
https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/view_all_comments_update/view_all_comments_update.MD
af854a3a-2127-422b-91ae-364da2661108
Exploit
Third Party Advisory
Change History
0
Changes found
Details not found