Vulnerability Database

296,172

Total vulnerabilities in the database

CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.

  • Published: Mar 23, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-2679
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
genixcms / genixcms - 0.0.1.x