PT-2017-6710

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.3-patch Description The issue concerns SQL injection vulnerabilities in the inc/lib/User.class.php file. Remote attackers can execute arbitrary SQL commands via the email parameter or the userid parameter to the...

CVE-2015-3933: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...