Skip to content

CVE-2017-5575 SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.

CriticalCVSS 9.8 EPSS 2.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.

Affected products

ProductAffected versionsFixed in
metalgenix genixcms <= 0.0.8 No fix listed

References

  • 95703 third-party-advisory vdb-entry
  • github.com issue-tracking patch third-party-advisory
  • github.com issue-tracking patch third-party-advisory