CVE-2017-5517

Critical

Published: 17/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

GeniXCMS version 0.0.8 has an SQL injection vulnerability in author.control.php that allows remote attackers to execute arbitrary SQL commands via the type parameter.

Risk Assessment

This vulnerability could lead to unauthorized access to the database and exposure of sensitive information, posing a serious threat to organizational security.

Recommendation

It is recommended to update GeniXCMS to the latest version and implement appropriate safeguards against SQL injection.

Original NVD description (English source)

SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.