Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4278
HistoryMay 23, 2017 - 2:58 a.m.

SQL Injection

2017-05-2302:58:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

EPSS

0.001

Percentile

42.5%

genix/cms is vulnerable to SQL injection attacks. The attacks exist because it does not filter the user-supplied parameter order given to the updateMenuOrder function in inc/lib/Control/Backend/menus.control.php which uses it as an SQL query.

EPSS

0.001

Percentile

42.5%

Related for VERACODE:4278