CVE-2017-5347

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL co...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory securityfocus.com
patch github.com