AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,
References
Link | Resource |
---|---|
https://github.com/loadream/AyaCMS/issues/2 | Exploit Issue Tracking Third Party Advisory |
https://github.com/loadream/AyaCMS/issues/2 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
21 Nov 2024, 06:30
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/loadream/AyaCMS/issues/2 - Exploit, Issue Tracking, Third Party Advisory |
Information
Published : 2022-03-01 15:15
Updated : 2024-11-21 06:30
NVD link : CVE-2021-44238
Mitre link : CVE-2021-44238
CVE.ORG link : CVE-2021-44238
JSON object : View
Products Affected
ayacms_project
- ayacms
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')