Search for packages
| purl | pkg:composer/genix/cms@1.1.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-a31b-8m5f-8uhf
Aliases: CVE-2017-14762 |
Cross-site Scripting GeniXCMS in `/inc/lib/Control/Backend/menus.control.php` has an XSS via the `id` parameter. |
Affected by 1 other vulnerability. |
|
VCID-d6b5-5jtr-xbg9
Aliases: CVE-2017-14763 |
Code Injection Authenticated users can execute arbitrary PHP code via a `.php` file in a ZIP archive of a theme. |
Affected by 1 other vulnerability. |
|
VCID-egzj-24sa-ryen
Aliases: CVE-2017-14764 |
Code Injection In the Upload Modules page, remote authenticated users can execute arbitrary PHP code via a `.php` file in a ZIP archive of a module. |
Affected by 1 other vulnerability. |
|
VCID-kh1w-jbky-6udy
Aliases: CVE-2017-14761 |
Cross-site Scripting In GeniXCMS in `/inc/lib/backend/menus.control.php` has an XSS via the `id` parameter. |
Affected by 1 other vulnerability. |
|
VCID-y3ud-dqh6-m3dm
Aliases: CVE-2017-14765 |
Cross-site Scripting GeniXCMS, in `gxadmin/index.php` has an XSS via the Menu `ID` field in a `page=menus` request. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||