420 matches found
CVE-2022-24563
In Genixcms v1.1.11, a stored Cross-Site Scripting XSS vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the introtitle and introimage parameters...
CVE-2022-24563
CVE-2022-24563 : Genixcms v1.1.11 contains a stored XSS vulnerability in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters. The issue is documented with a MEDIUM severity (CVSS v3.1 base score 5.4; CVSS v2.0 base score 3.5). The vulnerability enables scri...
CVE-2022-24563
In Genixcms v1.1.11, a stored Cross-Site Scripting XSS vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the introtitle and introimage parameters...
CVE-2022-24563: Improper Neutralization of Input During Web Page Generation
In Genixcms v1.1.11, a stored Cross-Site Scripting XSS vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the introtitle and introimage parameters...
PT-2022-16719
Name of the Vulnerable Software and Affected Versions Genixcms version 1.1.11 Description A stored Cross-Site Scripting XSS issue exists in the /gxadmin/index.php?page=themes&view=options endpoint via the intro title and intro image parameters. This allows for malicious script execution...
Metalgenix GeniXCMS Cross-Site Script Vulnerability
Metalgenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Metalgenix Indonesia. The system provides modules for user management, content management and menu management. A security vulnerability exists in Metalgenix GeniXCMS v1.1.11, which can be exploited by...
CVE-2020-10057
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user...
CVE-2020-10057
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user...
Improper access control
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user...
CVE-2020-10057
GeniXCMS 1.1.7 is affected by a user privilege escalation due to broken access control. The issue stems from an incomplete fix for CVE-2015-2680, where a CSRF token was used without validating that the token is tied to an administrative user. No patch/version remediation details are provided in t...
CVE-2020-10057
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user...
CVE-2020-10057
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user...
PT-2020-11887
Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.7 Description The issue is related to user privilege escalation due to broken access control. This occurs because of an incomplete fix for a previous issue, where the token is used as a CSRF protection mechanism without...
CVE-2020-10057: Cross-Site Request Forgery (CSRF)
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user...
CVE-2018-14476
GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...
CVE-2018-14476
GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...
Design/Logic Flaw
GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...
CVE-2018-14476
CVE-2018-14476 affects GeniXCMS 1.1.5 and is a cross-site scripting vulnerability exploitable via the installation step 1 parameters. The root cause is reflected in the documentation as XSS through the dbuser or dbhost fields submitted during step 1 of installation, allowing arbitrary web script ...