Lucene search

K
osvGoogleOSV:GHSA-2M9R-PM7Q-WR6F
HistoryMay 17, 2022 - 12:53 a.m.

GeniXCMS denial of service (account blockage)

2022-05-1700:53:05
Google
osv.dev
3

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php.

CPENameOperatorVersion
genix/cmseq1.0.0

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

Related for OSV:GHSA-2M9R-PM7Q-WR6F