Genixcms Security Vulnerabilities and Issues — Genixcms CVE List

Lucene search

MetalgenixGenixcms

2 matches found

CVE•added 2017/02/17 8:59 p.m.•34 views

CVE-2017-6065

SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter.

8.8CVSS8.8AI score0.00344EPSS

CVE•added 2017/02/21 7:59 a.m.•33 views

CVE-2017-5959

CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.

9.8CVSS9.5AI score0.00122EPSS