Autocms Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-8866 Sep 15, 02:15 MEDIUM POC This Month

A vulnerability was found in AutoCMS 5.4. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Autocms Autocms Project

NVD GitHub VulDB

CVSS 4.0

6.9

EPSS

0.6%

CVE-2024-44725 Sep 09, 20:15 HIGH POC This Week

AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Autocms Autocms Project

NVD GitHub

CVSS 3.1

7.2

EPSS

0.5%

CVE-2024-44724 Sep 09, 20:15 HIGH POC This Week

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE Code Injection Autocms Autocms Project

NVD GitHub

CVSS 3.1

7.2

EPSS

0.6%

CVE-2024-8866

EPSS 1% CVSS 6.9

MEDIUM POC This Month

PHP XSS Autocms +1

NVD GitHub VulDB

CVE-2024-44725

EPSS 0% CVSS 7.2

HIGH POC This Week

PHP SQLi Autocms +1

NVD GitHub

CVE-2024-44724

EPSS 1% CVSS 7.2

HIGH POC This Week

PHP RCE Code Injection +2

NVD GitHub