High severity7.2NVD Advisory· Published Dec 16, 2022· Updated Jun 17, 2026
CVE-2022-46135
CVE-2022-46135
Description
In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.
Affected products
4- cpe:2.3:a:aerocms_project:aerocms:0.0.1:*:*:*:*:*:*:*
- AeroCms/AeroCmsdescription
Patches
Vulnerability mechanics
References
1- github.com/MegaTKC/AeroCMS/issues/5nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.