3 matches found
CVE-2017-5517
SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter...
9.8CVSS0.02521EPSS
SaveExploits1References2
PT-2017-16552
Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.9 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the author.control.php file. Recommendations For GeniXCMS versions prior to 0.0.9,...
9.8CVSS0.02521EPSS
SaveExploits1References4
CVE-2017-5517: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter...
9.8CVSS6.4AI score0.02521EPSS
SaveExploits1References2
20