mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 19:17:37 +02:00
789 B
789 B
CVE-2017-5346
Description
SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.
POC
Reference
- http://code610.blogspot.com/2017/01/genixcms-sql-injection-quick-autopsy.html
- http://code610.blogspot.com/2017/01/genixcms-sql-injection-quick-autopsy.html
Github
No PoCs found on GitHub currently.