EUVD-2022-2157

Malicious code in bioql PyPI...

Cross-site Scripting in GeniXCMS

In Genixcms v1.1.11, a stored Cross-Site Scripting XSS vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the introtitle and introimage parameters...

CVE-2022-24563

In Genixcms v1.1.11, a stored Cross-Site Scripting XSS vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the introtitle and introimage parameters...

CVE-2022-24563: Improper Neutralization of Input During Web Page Generation

In Genixcms v1.1.11, a stored Cross-Site Scripting XSS vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the introtitle and introimage parameters...

PT-2022-16719

Name of the Vulnerable Software and Affected Versions Genixcms version 1.1.11 Description A stored Cross-Site Scripting XSS issue exists in the /gxadmin/index.php?page=themes&view=options endpoint via the intro title and intro image parameters. This allows for malicious script execution...

CVE-2017-14765

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

Cross site request forgery (csrf)

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

CVE-2017-14765

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

PT-2017-13679

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue concerns an XSS vulnerability. It can be triggered via the Menu ID field in a "page=menus" request to the "gxadmin/index.php" endpoint. Recommendations For GeniXCMS version 1.1.4, as a temporary...

CVE-2017-14765: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

GeniXCMS gxadmin/index.php file cross-site scripting vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in the gxadmin/index.php file in MetalGenix GeniXCMS version...

MetalGenix GeniXCMS SQL Injection Vulnerability (CNVD-2017-00558)

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the inc/lib/Control/Backend/posts.control.php file in MetalGenix...

CVE-2017-5347

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php...

CVE-2017-5347

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php...

CVE-2017-5346

SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php...

PT-2017-16447

Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter to the "gxadmin/index.php" endpoint. Recommendations For GeniXCMS version 0.0.8,...

CVE-2017-5346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php...

PT-2017-16448

Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the recipient parameter to the "gxadmin/index.php" endpoint. Recommendations For GeniXCMS version...

CVE-2017-5347: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php...

CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter to index.php or 2 username parameter to gxadmin/login.php...