GeniXCMS XSS Vulnerability

中危 6.1CVE-2017-17431 · GHSA-pwr7-j6g3-hmx6 · Published 05/12/2017 · updated 17/06/2026

要点

CVE-2017-17431 是影响 genix/cms, genixcms (genixcms) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.68%，高于 52.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
genix/cms Packagist	`≤ 1.1.5`	No fix yet
genixcms genixcms	`= 1.1.5`	No fix yet

Description

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.

NVD description

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.

References

nvd.nist.gov/vuln/detail/CVE-2017-17431 · ADVISORY
code610.blogspot.com/2017/12/modus-operandi-genixcms-115.html · WEB
semplon/GeniXCMS · PACKAGE

genix/cms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

genix/cms

Packagist

≤ 1.1.5

No fix yet

genixcms

= 1.1.5

No fix yet

Description

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.

NVD description

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.

genix/cms 的其他漏洞

查看全部 →