Show filters
290 Total Results
Displaying 81-90 of 290
Sort by:
Attacker Value
Unknown
CVE-2017-6479
Disclosure Date: March 05, 2017 (last updated November 26, 2024)
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter).
0
Attacker Value
Unknown
CVE-2017-5959
Disclosure Date: February 21, 2017 (last updated November 26, 2024)
CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a token.
0
Attacker Value
Unknown
CVE-2017-6065
Disclosure Date: February 17, 2017 (last updated November 26, 2024)
SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to execute arbitrary SQL commands via the order parameter.
0
Attacker Value
Unknown
CVE-2016-1925
Disclosure Date: January 23, 2017 (last updated November 25, 2024)
Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.
0
Attacker Value
Unknown
CVE-2017-5574
Disclosure Date: January 23, 2017 (last updated November 25, 2024)
SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.
0
Attacker Value
Unknown
CVE-2017-5575
Disclosure Date: January 23, 2017 (last updated November 25, 2024)
SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.
0
Attacker Value
Unknown
CVE-2017-5515
Disclosure Date: January 17, 2017 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.
0
Attacker Value
Unknown
CVE-2017-5516
Disclosure Date: January 17, 2017 (last updated November 25, 2024)
Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters.
0
Attacker Value
Unknown
CVE-2017-5518
Disclosure Date: January 17, 2017 (last updated November 25, 2024)
The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address.
0
Attacker Value
Unknown
CVE-2017-5517
Disclosure Date: January 17, 2017 (last updated November 25, 2024)
SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.
0
