Vulnerabilities

TI-2021-15635 CVE-2021-37787 · GHSA-p6r9-p725-g42c

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is…

LOW 31

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00331 Published 2025-03-11 No fix listed CWE-89

TI-2024-16655 CVE-2024-25227 · GHSA-ccc2-7fh4-pj2x

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute…

HIGH 81

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00794 Published 2024-03-15 No fix listed CWE-89

TI-2023-26660 CVE-2023-48858 · GHSA-4357-w9mw-jg92

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9…

MEDIUM 60

A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject arbitrary web script or HTML via the login.php? URL part.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0052 Published 2024-01-17 No fix listed CWE-79

TI-2023-25351 CVE-2023-46952 · GHSA-m45w-qgh5-r75j

Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute…

MEDIUM 60

Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute arbitrary code via a crafted payload to the Referer header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00459 Published 2024-01-17 No fix listed CWE-79

TI-2023-25352 CVE-2023-46953 · GHSA-p5m5-hv26-hw94

SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute…

MEDIUM 44

SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00829 Published 2024-01-06 No fix listed CWE-89