critical9.8Public exploit code
CVE-2015-3933
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL comm…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GeniXCMS 0.0.3 - 'register.php' SQL Injection2015-06-24 · webapps · php
Impact
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metalgenix | Genixcms | through 0.0.3 |