CVE-2015-3933
CriticalSummary
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before version 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.
Risk Assessment
Attackers can exploit these vulnerabilities to gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.
Recommendation
It is recommended to update GeniXCMS to version 0.0.3-patch or later and implement appropriate safeguards against SQL injection.
Original NVD description (English source)
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.