Skip to content

CVE-2017-5517 SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.

CriticalCVSS 9.8 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.

Affected products

ProductAffected versionsFixed in
metalgenix genixcms <= 0.0.8 No fix listed

References

  • 95455 third-party-advisory vdb-entry
  • github.com exploit issue-tracking patch third-party-advisory