CVE-2021-37787

CVE-2021-37787: 通过TinyMCE模块实现ABOCMS中的SQL注入 漏洞详情 CVE ID : CVE-2021-37787 产品 : ABOCMS 受影响版本 : 5.8.x, ≤5.9.3 漏洞类型 : SQL注入 CVSS评分 : 9.8 描述 ABOCMS的TinyMCE模块中存在一个严重的SQL注入漏洞。该漏洞是由于TinyMCE模块与数据库交互时输入清理不足导致的，允许攻击者注入恶意的SQL查询。这可能导致未经授权的数据访问、修改，甚至完全入侵底层数据库。 脆弱端点位于TinyMCE模块处理用户输入的过程中。攻击者可以利用此缺陷执行任意SQL命令。 影响...

EUVD-2007-6621

Malware in sbrugna...

EUVD-2021-24268

Malware in sbrugna...

CVE-2021-37787

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module...

CVE-2021-37787

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module...

ABO.CMS 安全漏洞

ABO.CMS is a content management platform from ABO.CMS, Inc. A security vulnerability exists in ABO.CMS versions 5.8 through 5.9.3, which originates from a SQL injection attack sent to the TinyMCE module via an HTTP POST request...

CVE-2021-37787

CVE-2021-37787 affects ABO.CMS versions 5.8–5.9.3, due to a SQL Injection vulnerability exploitable via an HTTP POST to the TinyMCE module. The connected documents confirm the affected component (ABO.CMS, TinyMCE integration) and the vulnerability class (SQL injection) but do not provide details ...

CVE-2021-37787

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module...

CVE-2021-37787

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module...

SA-CONTRIB-2010-025 - TinyMCE - Cross Site Scripting (XSS)

The TinyMCE module provides a "WYSIWYG" tool for entering rich text into various parts of a site. The TinyMCE module displayed text entered by an admin without filtering that text leading to a Cross Site Scription XSS vulnerability. XSS vulnerabilities may expose site administrative accounts whic...

CVE-2007-6656

SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

CVE-2007-6656

SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

CVE-2007-6656

SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection

CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail........

CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln

No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX...