Show filters
36 Total Results
Displaying 1-10 of 36
Sort by:
Attacker Value
Unknown
CVE-2022-24563
Disclosure Date: March 03, 2022 (last updated February 23, 2025)
In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.
0
Attacker Value
Unknown
CVE-2020-10057
Disclosure Date: March 04, 2020 (last updated February 21, 2025)
GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which "token" is used as a CSRF protection mechanism, but without validation that "token" is associated with an administrative user.
0
Attacker Value
Unknown
CVE-2017-14740
Disclosure Date: April 26, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu.
0
Attacker Value
Unknown
CVE-2018-14476
Disclosure Date: April 04, 2018 (last updated November 27, 2024)
GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation.
0
Attacker Value
Unknown
CVE-2017-17431
Disclosure Date: December 05, 2017 (last updated November 26, 2024)
GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.
0
Attacker Value
Unknown
CVE-2015-3933
Disclosure Date: November 08, 2017 (last updated November 26, 2024)
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.
0
Attacker Value
Unknown
CVE-2017-14762
Disclosure Date: September 27, 2017 (last updated November 26, 2024)
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.
0
Attacker Value
Unknown
CVE-2017-14761
Disclosure Date: September 27, 2017 (last updated November 26, 2024)
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.
0
Attacker Value
Unknown
CVE-2017-14765
Disclosure Date: September 27, 2017 (last updated November 26, 2024)
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.
0
Attacker Value
Unknown
CVE-2017-14764
Disclosure Date: September 27, 2017 (last updated November 26, 2024)
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.
0
