Описание
SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.
Ссылки
- ExploitThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitIssue TrackingPatch
- ExploitThird Party Advisory
- Third Party AdvisoryVDB Entry
- ExploitIssue TrackingPatch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:genixcms:genixcms:0.0.8:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.0108
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
EPSS
Процентиль: 77%
0.0108
Низкий
7.2 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-89