Ayacms Project
Ayacms Project Ayacms: vulnerabilidades y CVE
Ayacms Project Ayacms tiene 9 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-48116 | Alta (7.2) | 1.4% | — | 27 ene 2023 | AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php. |
| CVE-2022-47926 | Crítica (9.8) | 0.80% | — | 22 dic 2022 | AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php |
| CVE-2022-46102 | Crítica (9.8) | 0.74% | — | 22 dic 2022 | AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php |
| CVE-2022-46101 | Alta (8.8) | 1.1% | — | 22 dic 2022 | AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. |
| CVE-2022-45550 | Crítica (9.8) | 1.5% | — | 7 dic 2022 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). |
| CVE-2022-45548 | Alta (8.8) | 0.79% | — | 6 dic 2022 | AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability. |
| CVE-2022-43074 | Crítica (9.8) | 0.99% | — | 10 nov 2022 | AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2021-44238 | Alta (7.2) | 1.9% | — | 1 mar 2022 | AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, |
| CVE-2020-23686 | Alta (8.8) | 0.59% | — | 2 nov 2021 | Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts. |