CVE-2017-5574

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...

CVE-2017-5574

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...

CVE-2017-5574

The CVE-2017-5574 issue affects MetalGenix GeniXCMS: a SQL injection in register.php allows unauthenticated execution of arbitrary SQL via the activation parameter in GeniXCMS before version 1.0.0 (and affected older builds per CNVD/NVD references). The underlying root cause is unsafely handling ...