GitHub Advisoryadvisory · Packagist

GHSA-2m9r-pm7q-wr6f GeniXCMS denial of service (account blockage)

MEDIUM Published 2022-05-17 Modified 2024-04-25 Official page ↗
Aliases
CVE-2017-14231
Ecosystem
Packagist
Packages
genix/cms
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-20
Reviewed
2024-04-25

Affected packages

• Packagist genix/cms: < 1.1.0 → fixed in 1.1.0

Description

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php.

Related

Alias · CVE (1)

  • CVE-2017-14231 GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References