CVE-2015-2678

概要

参考情報

• blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 · Patch
• osvdb.org/show/osvdb/119394
• packetstormsecurity.com/files/130771/GeniXCMS-0.0.1-Cross-Site-Scripting.html · Exploit
• exploit-db.com/exploits/36321 · Exploit
• securityfocus.com/bid/73301
• zeroscience.mk/en/vulnerabilities/ZSL-2015-5233.php
• semplon/GeniXCMS commit 6982454
• semplon/GeniXCMS

genixcms のその他の脆弱性

• CVE-2017-14740中 4.8Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the …
• CVE-2017-17431中 6.1GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761…
• CVE-2017-14765中 6.1In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.
• CVE-2017-14764高 8.8In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of …
• CVE-2017-14763高 8.8In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of …