CVE-2015-2679 Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to...
HighCVSS 7.5
EPSS 5.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genixcms | <= 0.0.1 | No fix listed |
References
- blog.metalgenix.com patch
- blog.metalgenix.com vendor-advisory
- 119392 vdb-entry
- 119393 vdb-entry
- packetstormsecurity.com exploit
- 36321 exploit
- 73297 vdb-entry
- www.zeroscience.mk exploit
- github.com
- github.com