Aero CMS vulnerabilities

2 known vulnerabilities in Aero CMS from MegaTKC. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Aero CMS: Improper Control of Generation of Code

  CVE-2022-50944May 10, 2026MegaTKC

  Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the image parameter. Attackers can upload PHP files with embedded code to the admin posts.php endp

• 9.8 Critical severity

  Aero CMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-50895Jan 13, 2026MegaTKC

  Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, time-based, and UNION query techniques to extract sensitive database informati