PT-2017-18311
CVE-2017-8388
·
Published
2017-05-01
·
Updated
2022-05-13
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
GeniXCMS version 1.0.2
Description
The issue allows remote attackers to bypass a protection mechanism. This is achieved by sending a request to the "register.php?act=edit&id=1" endpoint.
Recommendations
For GeniXCMS version 1.0.2, consider restricting access to the register.php endpoint until a patch is available. As a temporary workaround, avoid using the
id parameter in the affected endpoint to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾