Vulnerabilities

TI-2024-08232 CVE-2024-8866 · GHSA-qcv9-p6c5-w5pr

AutoCMS robot.php cross site scripting

MEDIUM 64

A vulnerability was found in AutoCMS 5.4.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00627 Published 2024-09-15 No fix listed CWE-79

TI-2024-29969 CVE-2024-44725 · GHSA-rpgh-j58g-qrc4

HIGH 67

AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00471 Published 2024-09-09 No fix listed CWE-89

TI-2024-29968 CVE-2024-44724 · GHSA-g957-78r7-x4w5

HIGH 67

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00568 Published 2024-09-09 No fix listed CWE-94