Abocms

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Abocms records in CISA KEV

No Abocms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Abo.cms 5 records HIGH

Records

5 records

TI-2024-16655 CVE-2024-25227 · GHSA-ccc2-7fh4-pj2x

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute…

HIGH 81

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00794 Published 2024-03-15 No fix listed CWE-89

TI-2023-26660 CVE-2023-48858 · GHSA-4357-w9mw-jg92

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9…

MEDIUM 60

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0052 Published 2024-01-17 No fix listed CWE-79

TI-2023-25351 CVE-2023-46952 · GHSA-m45w-qgh5-r75j

Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute…

MEDIUM 60

Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute arbitrary code via a crafted payload to the Referer header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00459 Published 2024-01-17 No fix listed CWE-79

TI-2023-25352 CVE-2023-46953 · GHSA-p5m5-hv26-hw94

SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute…

MEDIUM 44

SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00829 Published 2024-01-06 No fix listed CWE-89

TI-2021-15635 CVE-2021-37787 · GHSA-p6r9-p725-g42c

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is…

LOW 31

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00331 Published 2025-03-11 No fix listed CWE-89

Open these records in search →

Critical	2
High	0
Medium	3
Low	0
No CVSS	0