6 matches found
CVE-2017-5519
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2017-5519
The CVE-2017-5519 issue affects GeniXCMS, where the Posts.class.php page’s id parameter enables SQL injection due to unsanitized input, allowing remote attackers to execute arbitrary SQL commands and potentially access sensitive data (affecting GeniXCMS up to version 0.0.8). This risk is supporte...
CVE-2017-5519
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2017-5519: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2017-16554
Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the Posts.class.php file. Recommendations For GeniXCMS versions prior to 0.0.9, update t...