Skip to content

Metalgenix Genixcms vulnerabilities

metalgenix genixcmsCross-site Scripting in GeniXCMSCVE-2022-245635.4 MediumMarch 3, 2022
metalgenix genixcmsGeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This...CVE-2020-100578.8 HighMarch 4, 2020
metalgenix genixcmsGeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation.CVE-2018-144766.1 MediumDecember 31, 2019
metalgenix genixcmsMetalGenix GeniXCMS vulnerable to SQL InjectionCVE-2015-3933Public exploit9.8 CriticalNovember 8, 2017
metalgenix genixcmsCSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The...CVE-2017-59599.8 CriticalFebruary 21, 2017
metalgenix genixcmsSQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0...CVE-2017-60658.8 HighFebruary 17, 2017
metalgenix genixcmsSQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote...CVE-2017-55759.8 CriticalJanuary 23, 2017
metalgenix genixcmsSQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users...CVE-2017-55749.8 CriticalJanuary 23, 2017
metalgenix genixcmsThe media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file...CVE-2017-55208.8 HighJanuary 17, 2017
metalgenix genixcmsSQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers...CVE-2017-55199.8 CriticalJanuary 17, 2017
metalgenix genixcmsThe media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF...CVE-2017-55187.4 HighJanuary 17, 2017
metalgenix genixcmsSQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote...CVE-2017-55179.8 CriticalJanuary 17, 2017
metalgenix genixcmsMultiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8...CVE-2017-55166.1 MediumJanuary 17, 2017
metalgenix genixcmsCross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8...CVE-2017-55155.4 MediumJanuary 17, 2017
metalgenix genixcmsSQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote...CVE-2017-53477.2 HighJanuary 12, 2017
metalgenix genixcmsSQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8...CVE-2017-53458.8 HighJanuary 12, 2017
metalgenix genixcmsMultiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote...CVE-2015-5066Public exploit4.3 MediumJune 24, 2015
metalgenix genixcmsCross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote...CVE-2015-2680Public exploit6.8 MediumMarch 23, 2015