CVE-2024-58308 is a SQL injection vulnerability in Quick.CMS 6.7 where the login form does not properly neutralize special SQL elements. This allows unauthenticated attackers to manipulate SQL queries by injecting payloads such as ' or '1'='1, effectively bypassing authentication controls and gaining administrative access. The vulnerability is exploitable remotely without any privileges or user interaction, making it highly critical.

Successful exploitation results in unauthorized administrative access to the affected Quick.CMS system, potentially allowing full control over the CMS, data exposure, and further system compromise. The vulnerability is critical due to its ease of exploitation and the high level of access gained.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the login interface where possible and monitor for suspicious activity. Avoid exposing the vulnerable version publicly. Do not rely on generic mitigations as this vulnerability specifically requires proper input validation and query parameterization.