PatchTheCVEayacms vulnerabilities and fixes
Recent CVEs affecting ayacms, with upgrade or downgrade steps. 7 tracked.
ayacms has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-01-27. Highest priority: CVE-2022-45550 (score 63/100).
- CVE-2022-48116 HIGH 7.2 DOWNGRADE AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/t
- CVE-2022-47926 CRITICAL 9.8 DOWNGRADE AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php
- CVE-2022-46102 CRITICAL 9.8 DOWNGRADE AyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php
- CVE-2022-46101 HIGH 8.8 DOWNGRADE AyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause comma
- CVE-2022-45550 CRITICAL 9.8 DOWNGRADE AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).
- CVE-2022-45548 HIGH 8.8 DOWNGRADE AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.
- CVE-2022-43074 CRITICAL 9.8 DOWNGRADE AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_up
FAQ
How do I fix ayacms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ayacms being exploited right now?
None of the tracked ayacms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ayacms CVE should I patch first?
CVE-2022-45550 currently ranks highest (63/100): AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE)..