CVE-2017-5347

Published: 2017-01-12T06:59Z

Last Modified: 2024-11-21T03:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt