Sql injection

2017-01-1206:59:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.4%

JSON

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI.

CPENameOperatorVersion
genixcmseq0.0.8

CPE	Name	Operator	Version
	genixcms	eq	0.0.8

References

www.securityfocus.com/bid/95660

github.com/semplon/GeniXCMS/commit/6e21c01d87672d81080450e6913e0093a02bfab8

github.com/semplon/GeniXCMS/issues/60