Skip to content
OpenAdvisories

Package · Packagist

genix/cms

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-24563

    Cross-site Scripting in GeniXCMS

    In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

    genix/cms Packagist
  • Medium 4.8
    CVE-2017-14740

    GeniXCMS Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu.

    genix/cms Packagist
  • Medium 6.1
    CVE-2017-17431

    GeniXCMS XSS Vulnerability

    GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.

    genix/cms Packagist
  • Medium 6.1
    CVE-2017-14762

    GeniXCMS Cross-site Scripting (XSS) via id parameter

    In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.

    genix/cms Packagist
  • Medium 6.1
    CVE-2017-14761

    GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter

    In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.

    genix/cms Packagist
  • Medium 6.1
    CVE-2017-14765

    GeniXCMS Cross-site Scripting (XSS) via the Menu ID field

    In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.

    genix/cms Packagist
  • Medium 5.3
    CVE-2017-14231

    GeniXCMS denial of service (account blockage)

    GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, Use…

    genix/cms Packagist
  • Medium 4.8
    CVE-2017-8780

    GeniXCMS Cross-site Scripting

    GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element.

    genix/cms Packagist
  • Medium 5.4
    CVE-2017-8762

    GeniXCMS Cross-site Scripting (XSS)

    GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.

    genix/cms Packagist
  • Medium 5.3
    CVE-2017-8388

    GeniXCMS Mailbox validation logic vulnerability

    GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection mechanism via a register.php?act=edit&id=1 request.

    genix/cms Packagist
  • Medium 5.4
    CVE-2017-8376

    GeniXCMS Cross-site Scripting (XSS)

    GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator.

    genix/cms Packagist