CVE-2024-25227

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the tblogin parameter in admin login page...

CVE-2021-37787

The ABO.CMS content management platform (versions 5.8.x through 5.9.3 ) is vulnerable to a critical SQL Injection vulnerability within the TinyMCE module . The flaw exists because the module fails to properly sanitize user-supplied input during database interactions. An unprivileged attacker can ...