3 matches found
CVE-2017-5575
SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter...
CVE-2017-5575: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter...
PT-2017-16586
Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the modules parameter in the inc/lib/Options.class.php file. Recommendations For versions prior to 1.0.0,...