Skip to content
OpenAdvisories

Archive

27 September 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8

    GeniXCMS arbitrary PHP code execution

    In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

  • High 8.8

    GeniXCMS arbitrary PHP code execution

    In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.