Genixcms · Genixcms · CVE-2017-5574
**Name of the Vulnerable Software and Affected Versions**
GeniXCMS versions prior to 1.0.0
**Description**
The issue allows unauthenticated users to execute arbitrary SQL commands. This is achieved via the `activation` parameter in the `register.php` file.
**Recommendations**
For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `register.php` file to prevent exploitation.