CVE-2015-2680

Mô tả

Tham khảo

• blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17 · Patch
• blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16 · Vendor Advisory
• osvdb.org/show/osvdb/119391
• packetstormsecurity.com/files/130772/GeniXCMS-0.0.1-Cross-Site-Request-Forgery.html · Exploit
• exploit-db.com/exploits/36321 · Exploit
• securityfocus.com/bid/73299
• zeroscience.mk/en/vulnerabilities/ZSL-2015-5234.php · Exploit
• semplon/GeniXCMS commit 6982454
• semplon/GeniXCMS

Lỗ hổng khác của genixcms

• CVE-2022-24563TRUNG BÌNH 5.4In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_…
• CVE-2020-10057CAO 8.8GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for C…
• CVE-2018-14476TRUNG BÌNH 6.1GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation.
• CVE-2015-3933NGHIÊM TRỌNG 9.8Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute…
• CVE-2017-5959NGHIÊM TRỌNG 9.8CSRF token bypass in GeniXCMS before 1.0.2 could result in escalation of privileges. The forgotpassword.php page can be used to acquire a to…