Archive
17 January 2017
Vulnerabilities first published on this day (UTC), newest first.
7 results · Feed
-
Unscored —
SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authentica…
-
Unscored —
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as d…
-
Unscored —
SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrar…
-
High 8.1
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …
KEV Sep 8, 2022 -
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers …
-
Unscored —
The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uplo…