EUVD-2022-4357

Malicious code in bioql PyPI...

EUVD-2022-5770

Malicious code in bioql PyPI...

EUVD-2022-2107

Malicious code in bioql PyPI...

GHSA-XF2G-C66G-5F5R GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

Design/Logic Flaw

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

CVE-2017-14761

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

CVE-2017-14762

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

PT-2017-13676

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue is related to a Cross-Site Scripting XSS problem. Specifically, the /inc/lib/Control/Backend/menus.control.php endpoint is vulnerable to XSS via the id parameter. This means an attacker could...

CVE-2017-14762: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

PT-2017-13675

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It affects the /inc/lib/backend/menus.control.php endpoint, specifically through the id parameter. This allows for potential XSS attacks...

CVE-2017-14761: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

SQL Injection

genix/cms is vulnerable to SQL injection. The attacker can trigger the attack because menus.control.php does not filter the user input to menuid...

CVE-2017-8377

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

CVE-2017-8377

CVE-2017-8377 affects GeniXCMS 1.0.2. The vulnerability is a SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter, enabling an attacker to manipulate SQL queries. Several connected sources corroborate that GeniXCMS 1.0.2 contains a SQL injection in the backend menus...

CVE-2017-8377: Improper Neutralization of Special Elements used in an SQL Command

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

PT-2017-18301

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue is related to SQL Injection in the inc/lib/Control/Backend/menus.control.php file via the menuid parameter. This allows for potential exploitation. Recommendations For GeniXCMS version 1.0.2, consid...

CVE-2017-6065

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

CVE-2017-6065: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...

PT-2017-16873

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 1.0.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the order parameter in the /inc/lib/Control/Backend/menus.control.php endpoint. Recommendations Fo...