exploitDog

CVE-2024-44724

Опубликовано: 09 сент. 2024

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value.

Ссылки

https://github.com/Hebing123/cve/issues/68
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:autocms_project:autocms:5.4:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00124

Низкий

7.2 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-g957-78r7-x4w5

CVSS3: 7.2

github

больше 1 года назад

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value.

EPSS

Процентиль: 32%

0.00124

Низкий

7.2 High

CVSS3

Дефекты

CWE-94