CVE-2024-44725

Name of the Vulnerable Software and Affected Versions AutoCMS version 5.4

Description A SQL injection vulnerability was discovered in AutoCMS via the sidebar parameter at the "/admin/robot.php" API endpoint. This issue can be exploited, potentially allowing unauthorized access to sensitive data.

Recommendations For AutoCMS version 5.4, as a temporary workaround, consider restricting access to the "/admin/robot.php" API endpoint or disabling the use of the sidebar parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.