Skip to content

CVE-2017-5574 SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.

CriticalCVSS 9.8 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.

Affected products

ProductAffected versionsFixed in
metalgenix genixcms <= 0.0.8 No fix listed

References

  • 95701 third-party-advisory vdb-entry
  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory