CVE-2017-5575

Critical

Published: 23/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In GeniXCMS before version 1.0.0, there is an SQL injection vulnerability in inc/lib/Options.class.php that allows remote attackers to execute arbitrary SQL commands via the modules parameter.

Risk Assessment

This vulnerability may lead to unauthorized access to the database and data manipulation, posing a serious threat to the integrity of the system.

Recommendation

It is recommended to update GeniXCMS to the latest version to eliminate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.