CVE-2017-5346 GeniXCMS SQL injection vulnerability
HighCVSS 7.2
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genix/cms(Packagist) | < 1.0.0 | 1.0.0 |
| genixcms | = 0.0.8 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit issue-tracking patch
- github.com patch
- github.com product
- code610.blogspot.com exploit third-party-advisory
- 95655 third-party-advisory vdb-entry
- github.com