29 matches found
EUVD-2024-49439
Malicious code in bioql PyPI...
CVE-2024-44725
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
CVE-2024-44724
AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsiteurl parameter at /admin/siteadd.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value...
CVE-2024-8866
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-8866
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-8866
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-8866 AutoCMS robot.php cross site scripting
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2024-8866
Summary: CVE-2024-8866 affects AutoCMS 5.4. The vulnerability exists in an unknown part of the file /admin/robot.php where manipulation of the parameter sidebar leads to cross-site scripting (XSS) . It can be exploited remotely, and the exploit has been disclosed publicly. Impact (as documented):...
CVE-2024-8866 AutoCMS robot.php cross site scripting
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
AutoCMS cross-site scripting vulnerabilities
AutoCMS is a content management system CMS from AutoCMS Open Source. It helps dealers manage their website content, online advertising, social media and analytics. A cross-site scripting vulnerability exists in AutoCMS version 5.4, which originates in an unknown section of the /admin/robot.php...
CVE-2024-8866: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
PT-2024-39284 · Autocms · Autocms
Name of the Vulnerable Software and Affected Versions: AutoCMS version 5.4 Description: A vulnerability was found in AutoCMS, affecting an unknown part of the file /admin/robot.php. The manipulation of the sidebar argument leads to cross-site scripting. It is possible to initiate the attack...
AutoCMS SQL Injection Vulnerability
AutoCMS is a content management system CMS from AutoCMS Open Source. It can help dealerships manage their website content, online advertising, social media and analytics. AutoCMS version 5.4 suffers from a SQL injection vulnerability that originates from the lack of validation of externally enter...
CVE-2024-44725
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
CVE-2024-44724
AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsiteurl parameter at /admin/siteadd.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value...
CVE-2024-44725
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php...
CVE-2024-44724
AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsiteurl parameter at /admin/siteadd.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value...
CVE-2024-44724
AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsiteurl parameter at /admin/siteadd.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value...
CVE-2024-44724
The AutoCMS v5.4 Content Management System contains a PHP code injection vulnerability. The root cause is the improper handling of the txtsite_url parameter at the /admin/site_add.php API endpoint, which allows an attacker to execute arbitrary PHP code by injecting a crafted value. This could lea...
CVE-2024-44725
AutoCMS version 5.4 is vulnerable to a SQL injection vulnerability. The root cause is the lack of validation for externally entered SQL statements within the sidebar parameter at the /admin/robot.php endpoint. An attacker can exploit this to execute illegal SQL commands, potentially leading to th...