Skip to content
OpenAdvisories

Package · Packagist

genix/cms

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-3933 Public exploit

    MetalGenix GeniXCMS vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.

    genix/cms Packagist
  • Critical 9.1
    CVE-2017-8827

    GeniXCMS Arbitrary User Password Reset Vulnerability

    forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.

    genix/cms Packagist