GeniXCMS SQL injection vulnerability

높음 7.3CVE-2016-10096 · GHSA-gjcj-fj23-5j5v · Published 01/01/2017 · updated 17/06/2026

요약

CVE-2016-10096은(는) genix/cms, genixcms (genixcms)에 영향을 주는 높음 (CVSS 7.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.6%, 전체 취약점의 76.1%보다 높음.
조치: 1.0.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
genix/cms Packagist	`< 1.0.0`	`1.0.0`
genixcms genixcms	`≤ 0.0.8`	No fix yet

Description

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.

NVD description

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.

References

nvd.nist.gov/vuln/detail/CVE-2016-10096 · ADVISORY
semplon/GeniXCMS · WEB
semplon/GeniXCMS commit d885eb2 · WEB
GeniXCMS/GeniXCMS · PACKAGE
hackersb.cn/shenji/107.html · WEB
securityfocus.com/bid/95172 · WEB

genix/cms의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

genix/cms

Packagist

< 1.0.0

1.0.0

genixcms

≤ 0.0.8

No fix yet

Description

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.

NVD description

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.

genix/cms의 다른 취약점

모두 보기 →