GitHub Advisoryadvisory · Packagist

GHSA-559c-w54x-8342 GeniXCMS Mailbox validation logic vulnerability

MEDIUM Published 2022-05-13 Modified 2024-04-25 Official page ↗

Aliases: CVE-2017-8388
Ecosystem: Packagist
Packages: genix/cms
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Reviewed: 2024-04-25

Affected packages

• Packagist genix/cms: < 1.1.0 → fixed in 1.1.0

Description

GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection mechanism via a register.php?act=edit&id=1 request.

Related

Alias · CVE (1)

CVE-2017-8388 GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection mechanism via a register.php?act=edit&id=1… vulnerability

References