Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Dliv3

#26076de 53,639
9.8CVSS total
Vulnerabilidades · 1
PT-2017-16585
9.8
2017-01-23
Genixcms · Genixcms · CVE-2017-5574
**Name of the Vulnerable Software and Affected Versions** GeniXCMS versions prior to 1.0.0 **Description** The issue allows unauthenticated users to execute arbitrary SQL commands. This is achieved via the `activation` parameter in the `register.php` file. **Recommendations** For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `register.php` file to prevent exploitation.