CVE-2017-8388

GeniXCMS 1.0.2 is affected by a protection bypass vulnerability that allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection via a register.php?act=edit&id=1 request. The issue is consistently described across multiple sources (NVD entry, GHSA/OSV entries, and related ad...

CVE-2017-8377

CVE-2017-8377 affects GeniXCMS 1.0.2. The vulnerability is a SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter, enabling an attacker to manipulate SQL queries. Several connected sources corroborate that GeniXCMS 1.0.2 contains a SQL injection in the backend menus...

CVE-2017-8388

GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit&id=1 request...

CVE-2017-8377

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

CVE-2017-8376

GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator...

GeniXCMS Security Bypass Vulnerability

GeniXCMS is a PHP-based Content Management System and Framework CMSF, a simple and lightweight CMSF that is a starting point for users to build their own online applications, and facilitates the creation of user managers, content managers and menu managers when they are already in place. It is a...

Cross site request forgery (csrf)

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token...

CVE-2017-5959

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token...

CVE-2017-5959

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token...

CVE-2017-5959

CVE-2017-5959 affects GeniXCMS prior to 1.0.2. The vulnerability is a CSRF token bypass that can lead to privilege escalation, with the forgotpassword.php page enabling token acquisition. Multiple sources (NVD/NVDC CNVD) confirm the issue and the fix is v1.0.2. There is no explicit exploitation c...

CVE-2017-5959

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token...

GeniXCMS SQL Injection Vulnerability (CNVD-2017-02228)

GeniXCMS is a PHP-based Content Management System and Framework CMSF, a simple and lightweight CMSF that is a starting point for users to build their own online applications, and facilitates the creation of user managers, content managers and menu managers when they are already in place. It is a...

Sql injection

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

CVE-2017-6065

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

CVE-2017-6065

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

CVE-2017-6065

GeniXCMS contains a SQL injection in inc/lib/Control/Backend/menus.control.php (affecting 1.0.2 and earlier). The vulnerability arises because the parameter order is directly used in an SQL query without proper validation/sanitization, enabling remote authenticated users to execute arbitrary SQL ...

CVE-2017-6065

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-01322)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the register.php file in MetalGenix GeniXCMS 0.0.8 and earlier...

MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-01320)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the inc/lib/Options.class.php file in MetalGenix GeniXCMS 0.0.8 an...

CVE-2017-5574

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...