CVE-2015-2679

2015-03-23T16:59:00
ID CVE-2015-2679
Type cve
Reporter cve@mitre.org
Modified 2016-12-03T03:05:00

Description

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.