CVE-2024-44724

AutoCMS v5.4 is affected by a PHP code injection vulnerability exposed via the txtsite_url parameter in /admin/site_add.php. Exploitation allows executing arbitrary PHP code, as described across multiple sources (e.g., Red Hat and CNNVD entries). The issue is tied to an input parameter in the API...

CVE-2024-44725

AutoCMS v5.4 is affected by a SQL injection in the sidebar parameter of /admin/robot.php. This CVE (CVE-2024-44725) is documented with a high impact (C/H I/H A/H) and CVSS v3.1 score of 7.2. Root cause: lack of input validation in the sidebar parameter leading to SQL statement manipulation. Explo...

CVE-2024-8866

Summary: CVE-2024-8866 affects AutoCMS 5.4. The vulnerability exists in an unknown part of the file /admin/robot.php where manipulation of the parameter sidebar leads to cross-site scripting (XSS) . It can be exploited remotely, and the exploit has been disclosed publicly. Impact (as documented):...