CVE-2024-8866: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

PT-2024-31223

Name of the Vulnerable Software and Affected Versions AutoCMS version 5.4 Description A SQL injection vulnerability was discovered in AutoCMS via the sidebar parameter at the "/admin/robot.php" API endpoint. This issue can be exploited, potentially allowing unauthorized access to sensitive data...

CVE-2024-44725

AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...