critical9.8
CVE-2017-5575
SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules par…
Impact
SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metalgenix | Genixcms | through 0.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95703
- https://github.com/semplon/GeniXCMS/issues/68
- https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0
- http://www.securityfocus.com/bid/95703
- https://github.com/semplon/GeniXCMS/issues/68
- https://github.com/semplon/GeniXCMS/releases/tag/v1.0.0