CVE-2024-25227

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the tblogin parameter in admin login page...

CVE-2021-37787

The content management platform ABO.CMS versions 5.8 through 5.9.3 is vulnerable to a SQL Injection flaw within the TinyMCE module . The root cause is insufficient input sanitization when the module interacts with the database via HTTP POST requests. An unauthenticated attacker can exploit this b...