Skip to content
Threat Feed

Vendor

MegaTKC

1 brief RSS
high threat

CVE-2022-50944: Aero CMS 0.0.1 PHP Code Injection Vulnerability

Aero CMS 0.0.1 is vulnerable to PHP code injection (CVE-2022-50944), allowing an authenticated attacker to execute arbitrary PHP code by uploading malicious files through the image parameter, leading to remote code execution on the server.

Aero CMS 0.0.1 code-injection php web-application cve-2022-50944
2r 1t 1c