← Database

CVE-2022-46135

HIGH CVSS: 7.2 Published: 2022-12-16 Modified: 2026-06-17

Description

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

Affected Platforms

Aerocms Project Aerocms

Weakness Type

CWE-434, CWE-434

References