3 matches found
CVE-2017-5519
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2017-5519
The CVE-2017-5519 issue affects GeniXCMS, where the Posts.class.php page’s id parameter enables SQL injection due to unsanitized input, allowing remote attackers to execute arbitrary SQL commands and potentially access sensitive data (affecting GeniXCMS up to version 0.0.8). This risk is supporte...