exploitDog

CVE-2024-25227

Опубликовано: 15 мар. 2024

Источник: nvd

CVSS3: 9.8

CVSS3: 6.5

EPSS Низкий

Описание

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in admin login page.

Ссылки

https://thetrueartist.wixsite.com/cveblog/post/understanding-the-potential-impact-of-cve-2024-25227-what-you-need-to-know-and-how-it-was-discovered
Exploit
Third Party Advisory
https://thetrueartist.wixsite.com/cveblog/post/understanding-the-potential-impact-of-cve-2024-25227-what-you-need-to-know-and-how-it-was-discovered
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:abocms:abo.cms:5.8:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00888

Низкий

9.8 Critical

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-ccc2-7fh4-pj2x

CVSS3: 9.8

github

почти 2 года назад

SQL Injection vulnerability in ABO.CMS version 5.8, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), escalate privileges, and obtain sensitive information via the tb_login parameter in admin login page.

EPSS

Процентиль: 75%

0.00888

Низкий

9.8 Critical

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-89

CWE-89