Skip to content
OpenAdvisories

Package · Packagist

genix/cms

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2017-14764

    GeniXCMS arbitrary PHP code execution

    In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

    genix/cms Packagist
  • High 8.8
    CVE-2017-14763

    GeniXCMS arbitrary PHP code execution

    In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.

    genix/cms Packagist
  • High 8.8
    CVE-2017-8377

    GeniXCMS SQL Injection

    GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter.

    genix/cms Packagist
  • High 7.2
    CVE-2017-5346

    GeniXCMS SQL injection vulnerability

    SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.

    genix/cms Packagist
  • High 7.3
    CVE-2016-10096

    GeniXCMS SQL injection vulnerability

    SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.

    genix/cms Packagist