critical9.8
CVE-2017-5574
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation paramete…
Impact
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metalgenix | Genixcms | through 0.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95701
- https://github.com/semplon/GeniXCMS/issues/69
- https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0
- http://www.securityfocus.com/bid/95701
- https://github.com/semplon/GeniXCMS/issues/69
- https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0