CyberSecBulletin

MegaTKC vulnerabilities

We track 2 vulnerabilities in MegaTKC products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 10, 2026.

2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score

Latest MegaTKC vulnerabilities

  • 8.8 High severity

    Aero CMS: Improper Control of Generation of Code

    CVE-2022-50944MegaTKC

    Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endp

  • 9.8 Critical severity

    Aero CMS: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2022-50895MegaTKC

    Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, time-based, and UNION query techniques to extract sensitive database informati