CVE-2022-50895 HIGH

CVE-2022-50895: Aero CMS 0.0.1 - SQL Injection

Vendor Megatkc

Product Aero CMS

Weakness CWE-89 · SQLi

Published January 13, 2026

Last update April 7, 2026

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Aero CMS 0.0.1 contains a SQL injection vulnerability in the author parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, time-based, and UNION query techniques to extract sensitive database information and potentially compromise the system.

Key dates

02Disclosure timeline

January 13, 2026 CVE published

April 7, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-50895 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2019-25581 i-doit CMDB 1.12 SQL Injection via objGroupID Parameter CVE-2025-13277 code-projects Nero Social Networking Site friendsphoto.php sql injection CVE-2026-34386 Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin CVE-2025-8989 SourceCodester COVID 19 Testing Management System edit-phlebotomist.php sql injection CVE-2025-30570 WordPress دکمه، شبکه اجتماعی خرید plugin <= 2.0.6 - SQL Injection Vulnerability