CVE-2017-5347

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php...

CVE-2017-5345

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...

GenixCMS register.php SQL injection vulnerability

Details source: http://www.hackersb.cn/shenji/107.html The vulnerability principle Program the root directory of the register. php, section 116 row to 118 line: if isset$GET'activation' code... $usr = Db::resultsprintf"SELECT FROM user WHERE activation = '%s' LIMIT 1", $GET'activation' ; Can be...

MetalGenix GeniXCMS SQL Injection Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the register.php file in MetalGenix GeniXCMS versions prior to...

CVE-2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

Sql injection

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

CVE-2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

CVE-2016-10096

GeniXCMS before 1.0.0 contains a SQL injection in register.php that can be triggered by the activation parameter to allow remote execution of arbitrary SQL. The issue is exposed in multiple references (e.g., CVE-2016-10096 and accompanying advisories) and is reported across NVD, CNVD, OSV, GHSA, ...

CVE-2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

MetalGenix GeniXCMS 0.0.1 - XSS Vulnerabilities

No description provided by source...

GeniXCMS 0.0.1 /index.php CSRF漏洞

No description provided by source...

genixcms 0.0.1 /index.php SQL注入漏洞

No description provided by source...

genixcms 0.0.3 /register.php SQL注入漏洞

No description provided by source...

GeniXCMS 0.0.3 - XSS Vulnerabilities

漏洞标题：持续性XSS 厂商主页: genixcms.org 软件链接: genixcms.org 版本: 0.0.3 测试于: windows 7 类别: web应用 厂商:=============================================genixcms.org产品:=====================================================GeniXCMS v0.0.3 是一个基于PHP的管理系统 咨询信息:===================================================多个持续型&反射型...

GeniXCMS XSS Vulnerabilities

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-GENIXCMS0621.txt Vendor: ============================================= genixcms.org Product: ===================================================== GeniXCMS v0.0.3 is a PHP...

Multiple Cross-Site Scripting Vulnerabilities in MetalGenix GeniXCMS

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in MetalGenix GeniXCMS version 0.0.3. The vulnerability exists...

GeniXCMS 0.0.3 SQL Injection

Exploit Title: Genixcms register.php multiple SQL vuln Date: 2015-06-23 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.genixcms.org Software Link: https://codeload.github.com/semplon/GeniXCMS/zip/master/GeniXCMS-master.zip Version: 0.0.3 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-39...

GeniXCMS 0.0.3 - XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Persistent XSS Google Dork: intitle: Persistent XSS Date: 2015-06-21 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: genixcms.org Software Link: genixcms.org Version: 0.0.3 Tested on: windo...

GeniXCMS 0.0.3 - register.php SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Genixcms register.php multiple SQL vuln Date: 2015-06-23 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.genixcms.org Software Link: https://codeload.github.com/semplon/GeniXCMS/zip/master/GeniXCMS-master.zip Version:...

Genixcms Multiple SQL Injection Vulnerabilities (Jun 2015)

Genixcms is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...