AeroCMS SQL Injection Vulnerability (CNVD-2023-00001)

AeroCMS is a content management system from AeroCMS, Inc. AeroCMS v0.0.1 contains a SQL injection vulnerability, which stems from the vulnerability of the Approve parameter of the CMS system to SQL injection attacks. An attacker could exploit the vulnerability by inserting SQL commands into a Web form submission or query string of an input domain or page request, eventually reaching the point of tricking the server into executing a malicious SQL command.