GeniXCMS 1.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:genixcms:genixcms:1.0.2:*:*:*:*:*:*:*part: a version: 1.0.2 update: *
| Vendor | Genixcms (4e46b16c-eceb-5a60-bb59-d28323f45046) |
|---|---|
| Product | Genixcms (b5761e5c-11a2-5eb5-82c7-90082e0d39e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/semplon/genixcms |
purl2cpe | 2026-06-01 10:16:10.704693 |
pkg:sourceforge/genixcms |
purl2cpe | 2026-06-01 10:16:10.704694 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8827 |
vulnerable | 2026-06-08 05:10:08.959470 |
Details available
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.
Published: 2017-05-08T06:10:00.000Z
Updated: 2024-08-05T16:48:22.226Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8780 |
vulnerable | 2026-06-08 05:10:08.893002 |
Details available
GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element.
Published: 2017-05-04T14:00:00.000Z
Updated: 2024-09-17T01:55:42.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8762 |
vulnerable | 2026-06-08 05:10:08.862909 |
Details available
GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.
Published: 2017-05-03T22:00:00.000Z
Updated: 2024-09-16T18:13:33.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8388 |
vulnerable | 2026-06-08 05:10:08.164505 |
Details available
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection mechanism via a register.php?act=edit&id=1 request.
Published: 2017-05-01T16:00:00.000Z
Updated: 2024-08-05T16:34:22.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8377 |
vulnerable | 2026-06-08 05:10:08.150236 |
Details available
GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter.
Published: 2017-05-01T16:00:00.000Z
Updated: 2024-08-05T16:34:22.753Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8376 |
vulnerable | 2026-06-08 05:10:08.149848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.