Autocms Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Autocms Project records in CISA KEV

No Autocms Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Autocms · all components

TI-2024-29969 CVE-2024-44725 · GHSA-rpgh-j58g-qrc4

HIGH 67

AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00471 Published 2024-09-09 No fix listed CWE-89

TI-2024-29968 CVE-2024-44724 · GHSA-g957-78r7-x4w5

HIGH 67

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00568 Published 2024-09-09 No fix listed CWE-94

TI-2024-08232 CVE-2024-8866 · GHSA-qcv9-p6c5-w5pr

MEDIUM 64

A vulnerability was found in AutoCMS 5.4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00627 Published 2024-09-15 No fix listed CWE-79