Metalgenix vulnerabilities

Products

• Genixcms 18

Newest

• metalgenix genixcms Cross-site Scripting in GeniXCMS CVE-2022-24563 5.4 MediumMarch 3, 2022
• metalgenix genixcms GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This... CVE-2020-10057 8.8 HighMarch 4, 2020
• metalgenix genixcms GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation. CVE-2018-14476 6.1 MediumDecember 31, 2019
• metalgenix genixcms MetalGenix GeniXCMS vulnerable to SQL Injection CVE-2015-3933 Public exploit 9.8 CriticalNovember 8, 2017
• metalgenix genixcms CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The... CVE-2017-5959 9.8 CriticalFebruary 21, 2017
• metalgenix genixcms SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0... CVE-2017-6065 8.8 HighFebruary 17, 2017
• metalgenix genixcms SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote... CVE-2017-5575 9.8 CriticalJanuary 23, 2017
• metalgenix genixcms SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users... CVE-2017-5574 9.8 CriticalJanuary 23, 2017
• metalgenix genixcms The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file... CVE-2017-5520 8.8 HighJanuary 17, 2017
• metalgenix genixcms SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers... CVE-2017-5519 9.8 CriticalJanuary 17, 2017
• metalgenix genixcms The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF... CVE-2017-5518 7.4 HighJanuary 17, 2017
• metalgenix genixcms SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote... CVE-2017-5517 9.8 CriticalJanuary 17, 2017
• metalgenix genixcms Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8... CVE-2017-5516 6.1 MediumJanuary 17, 2017
• metalgenix genixcms Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8... CVE-2017-5515 5.4 MediumJanuary 17, 2017
• metalgenix genixcms SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote... CVE-2017-5347 7.2 HighJanuary 12, 2017
• metalgenix genixcms SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8... CVE-2017-5345 8.8 HighJanuary 12, 2017
• metalgenix genixcms Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote... CVE-2015-5066 Public exploit 4.3 MediumJune 24, 2015
• metalgenix genixcms Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote... CVE-2015-2680 Public exploit 6.8 MediumMarch 23, 2015