Skip to content

CVE-2017-5519 SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CriticalCVSS 9.8 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

ProductAffected versionsFixed in
metalgenix genixcms <= 0.0.8 No fix listed

References

  • 95458 third-party-advisory vdb-entry
  • github.com exploit issue-tracking patch third-party-advisory