AeroCMS 0.1.1 - SQL Injection
AeroCMS 0.1.1 contains a SQL injection caused by unsanitized author parameter, letting attackers execute arbitrary SQL commands, exploit requires crafted author input. References: https://www.exploit-db.com/exploits/51022 https://www.nu11secur1ty.com/2022/08/aerocms-v001-sqli.html https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/MegaTKC/2021/AeroCMS-v0.0.1-SQLi https://nvd.nist.gov/vuln/detail/CVE-2022-38812
url