ABO.CMS-Login-SQLi-CVE-2024-25227

ABO.CMS-Login-SQLi-CVE-2024-25227 Неаутентифицированная SQL-инъекция и обход входа CVE-2024-25227 Дата: 23/02/2024 Протестировано на ABO.CMS 5.8 Поставщик: ABO.CMS URL поставщика:https://abocms.ru ABO.CMS 5.8 уязвим для SQL-инъекции через параметр tblogin на странице входа администратора...

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227

ABO.CMS-EXPLOIT-Unauthenticated-Login-Bypass-CVE-2024-25227 CVE-2024-25227 Эксплойт CVE-2024-25227 — это уязвимость SQLi в ABO.CMS 5.8, обнаруженная в параметре "tblogin" PoC: POST /login.aspx HTTP/1.1 Host: localhost Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 Windows NT 10.0; Win64;...

CVE-2024-25227: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service DoS, escalate privileges, and obtain sensitive information via the tblogin parameter in admin login page...

ABO.CMS Security Vulnerabilities

ABO.CMS is a content management platform. A security vulnerability exists in ABO.CMS version 5.8, which stems from the presence of a SQL injection vulnerability that allows remote attackers to execute arbitrary code, cause a denial of service DoS, elevate privileges, and gain access to sensitive...