Browse CVEs

MEDIUM 5.4 CVE-2022-24563 In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and… Genixcms No fix yet Fix from $1,6002022-03-03 HIGH 8.8 CVE-2020-10057 GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2… Genixcms No fix yet Fix from $1,9502020-03-04 MEDIUM 6.1 CVE-2018-14476 GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation. Genixcms No fix yet Fix from $1,6002019-12-31 CRITICAL 9.8 CVE-2015-3933 Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrar… Genixcms after 0.0.3 Fix from $2,3002017-11-08 CRITICAL 9.8 CVE-2017-5959 CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token. Genixcms after 1.0.1 Fix from $2,3002017-02-21 HIGH 8.8 CVE-2017-6065 SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbit… Genixcms after 1.0.1 Fix from $1,9502017-02-17 CRITICAL 9.8 CVE-2017-5574 SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activatio… Genixcms after 0.0.8 Fix from $2,3002017-01-23 CRITICAL 9.8 CVE-2017-5575 SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the m… Genixcms after 0.0.8 Fix from $2,3002017-01-23 CRITICAL 9.8 CVE-2017-5517 SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type pa… Genixcms after 0.0.8 Fix from $2,3002017-01-17 CRITICAL 9.8 CVE-2017-5519 SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id paramet… Genixcms after 0.0.8 Fix from $2,3002017-01-17 HIGH 8.8 CVE-2017-5520 The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, wh… Genixcms after 0.0.8 Fix from $1,9502017-01-17 HIGH 7.4 CVE-2017-5518 The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an i… Genixcms after 0.0.8 Fix from $1,9502017-01-17 MEDIUM 6.1 CVE-2017-5516 Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script… Genixcms after 0.0.8 Fix from $1,6002017-01-17 MEDIUM 5.4 CVE-2017-5515 Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary … Genixcms after 0.0.8 Fix from $1,6002017-01-17 HIGH 8.8 CVE-2017-5345 SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary … Genixcms Patch available Fix from $1,9502017-01-12 HIGH 7.2 CVE-2017-5347 SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL c… Genixcms Patch available Fix from $1,9502017-01-12 MEDIUM 6.8 CVE-2015-2680 Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administr… Genixcms after 0.0.1 Fix from $1,6002015-03-23