Skip to content
OpenAdvisories
High · 7.2 CVE-2022-46135 EUVD-2022-48973GHSA-h464-v7f9-fwjm

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload websh…

Published Dec 16, 2022 · Updated Apr 17, 2025 · Assigned by mitre

Description

In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.

References