CVEs published January 17, 2017
7 CVEs were published on January 17, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 7
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 6
- CVE-2017-5515Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject a
- CVE-2017-5516Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary w
- CVE-2017-5517SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via th
- CVE-2017-5518The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL
- CVE-2017-5519SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the i
- CVE-2017-5520The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP co