CVE-2018-14476

Description

References

• packetstormsecurity.com/files/151006/GeniXCMS-1.1.5-Cross-Site-Scripting.html · Exploit
• semplon/GeniXCMS · Third Party Advisory

genixcms의 다른 취약점

• CVE-2022-24563보통 5.4In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_…
• CVE-2020-10057높음 8.8GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for C…
• CVE-2015-3933심각 9.8Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute…
• CVE-2017-5959심각 9.8CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a to…
• CVE-2017-6065높음 8.8SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authenticated users to exec…