CVE-2017-14762

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

PT-2017-13676

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue is related to a Cross-Site Scripting XSS problem. Specifically, the /inc/lib/Control/Backend/menus.control.php endpoint is vulnerable to XSS via the id parameter. This means an attacker could...

CVE-2017-8377

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

PT-2017-18301

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue is related to SQL Injection in the inc/lib/Control/Backend/menus.control.php file via the menuid parameter. This allows for potential exploitation. Recommendations For GeniXCMS version 1.0.2, consid...

CVE-2017-6065

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

PT-2017-16873

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 1.0.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the order parameter in the /inc/lib/Control/Backend/menus.control.php endpoint. Recommendations Fo...