CVEvulnerability
CVE-2015-2679
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.
Affected configurations
• genixcms genixcms (<= 0.0.1)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 Patch
- http://blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16 Vendor Advisory
- http://osvdb.org/show/osvdb/119392 osvdb.org
- http://osvdb.org/show/osvdb/119393 osvdb.org
- http://packetstormsecurity.com/files/130770/GeniXCMS-0.0.1-SQL-Injection.html Exploit
- http://www.exploit-db.com/exploits/36321 Exploit
- http://www.securityfocus.com/bid/73297 www.securityfocus.com
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5232.php Exploit
- https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815 github.com
- https://github.com/semplon/GeniXCMS/issues/7 github.com
- http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 Patch
- http://blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16 Vendor Advisory
- http://osvdb.org/show/osvdb/119392 osvdb.org
- http://osvdb.org/show/osvdb/119393 osvdb.org
- http://packetstormsecurity.com/files/130770/GeniXCMS-0.0.1-SQL-Injection.html Exploit
- http://www.exploit-db.com/exploits/36321 Exploit
- http://www.securityfocus.com/bid/73297 www.securityfocus.com
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5232.php Exploit
- https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815 github.com
- https://github.com/semplon/GeniXCMS/issues/7 github.com