GeniXCMS SQL Injection

2022-05-1702:46:12

CWE-89

GitHub Advisory Database

github.com

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter.

CPENameOperatorVersion
genix/cmslt1.1.0

CPE	Name	Operator	Version
	genix/cms	lt	1.1.0

References

github.com/advisories/GHSA-34vw-8cjw-cwjj

github.com/semplon/GeniXCMS/commit/e0ad60b2bb967fa3f63c35b92afe84c5f3b31009

github.com/semplon/GeniXCMS/issues/72

nvd.nist.gov/vuln/detail/CVE-2017-8377