Security Advisory

CVE-2024-44724

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-09 00:00:00
Last updated 2024-09-09 20:44:51
Assigner mitre
State PUBLISHED

Description

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_add.php. This vulnerability allows attackers to execute arbitrary PHP code via injecting a crafted value.