Skip to content
OpenAdvisories

Archive

17 January 2017

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —

    SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary S…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authentica…

  • Unscored —

    The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as d…

  • Unscored —

    SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrar…

  • High 8.1
    CVE-2017-5521 Exploited Public exploit Scanner template EPSS 89%

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …

    KEV Sep 8, 2022
  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers …

  • Unscored —

    The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uplo…