nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-58308 CVE-2024-58308
CRITICAL
Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login
Record summary
CVE-2024-58308 has a selected CVSS score of 9.3 (critical); EIP currently links 1 catalogued exploit.
Description
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 18, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Quick.CMSBrowse opensolution / Quick.CMSDefault status: unaffected | CVE List | 6.7 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBQuick.CMS 6.7 - SQL Injection Login BypassExploitDB exploitby H4X.ForensicsNot analyzed1 file
References
5Software Linkproduct
https://opensolution.org/download/home.html?sFile=Quick.Cms_v6.7-en.zip ExploitDB-51910exploit
https://www.exploit-db.com/exploits/51910 Official Product Homepageproduct
https://www.opensolution.org/ VulnCheck Advisory: Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin LoginThird-party advisory
https://www.vulncheck.com/advisories/quickcms-sql-injection-authentication-bypass-via-admin-login