Ayacms Project vulnerabilities
We track 2 vulnerabilities in Ayacms Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 22, 2022.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Ayacms Project vulnerabilities
- 8.8 High severity
Ayacms: Improper Control of Generation of Code
AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code.
- 9.8 Critical severity
Ayacms: Unrestricted Upload of File with Dangerous Type
AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.