CVE-2022-38812

CVE-2022-38812

Published 31 Aug 2022 · Updated 03 Aug 2024

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 2.7%

AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.

Affected products

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi https://www.nu11secur1ty.com/2022/08/aerocms-v001-sqli.html