EUVD-2022-2107

Malicious code in bioql PyPI...

EUVD-2022-4357

Malicious code in bioql PyPI...

EUVD-2022-5770

Malicious code in bioql PyPI...

GHSA-XF2G-C66G-5F5R GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

Design/Logic Flaw

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

CVE-2017-14761: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

CVE-2017-14762: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

SQL Injection

genix/cms is vulnerable to SQL injection. The attacker can trigger the attack because menus.control.php does not filter the user input to menuid...

CVE-2017-8377

CVE-2017-8377 affects GeniXCMS 1.0.2. The vulnerability is a SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter, enabling an attacker to manipulate SQL queries. Several connected sources corroborate that GeniXCMS 1.0.2 contains a SQL injection in the backend menus...

CVE-2017-8377: Improper Neutralization of Special Elements used in an SQL Command

GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter...

CVE-2017-6065: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter...