ABO.CMS SQL Injection Vulnerability in Unprivileged Administrative Interface

A SQL injection vulnerability has been identified in the unprivileged administrative interface of ABO.CMS versions 5.8 through 5.9.3. The issue arises in the TinyMCE module, where an HTTP POST request can be exploited to inject malicious SQL code.

Impact

Exploitation of this vulnerability allows for SQL injection, which could lead to unauthorized data access or manipulation in the application's database.