Approved changes feed: RSS · Atom

cpe:2.3:a:autocms:autocms:5.4:*:*:*:*:*:*:*

part: a version: 5.4 update: *

VendorAutocms (667f30dc-eba2-54e6-9e89-f33e9a567d28)
ProductAutocms (0efa91d9-efd4-5c3b-81b7-ab7bde9f36f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8866 vulnerable 2026-06-08 07:00:25.865955 AutoCMS robot.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in AutoCMS 5.4. It has been classified as problematic. This affects an unknown part of the file /admin/robot.php. The manipulation of the argument sidebar leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-09-15T01:31:05.487Z
Updated: 2024-09-16T20:16:50.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44725 vulnerable 2026-06-08 06:45:54.144090 Details available
AutoCMS v5.4 was discovered to contain a SQL injection vulnerability via the sidebar parameter at /admin/robot.php.
Published: 2024-09-09T00:00:00.000Z
Updated: 2024-09-09T20:42:01.965Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44724 vulnerable 2026-06-08 06:45:54.142084 Details available
AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value.
Published: 2024-09-09T00:00:00.000Z
Updated: 2024-09-09T20:44:51.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.