SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
Link | Resource |
---|---|
https://github.com/semplon/GeniXCMS/issues/67 | Exploit Issue Tracking Patch Third Party Advisory |
http://www.securityfocus.com/bid/95458 | Third Party Advisory VDB Entry |
Configurations
Information
Published : 2017-01-17 01:59
Updated : 2017-01-27 08:07
NVD link : CVE-2017-5519
Mitre link : CVE-2017-5519
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
metalgenix
- genixcms