Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

36 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-5517	Modificada	Crítica (9.8)	2.5%	—	Metalgenix Genixcms	17/1/2017	17/6/2026	SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.
CVE-2017-5516	Modificada	Media (6.1)	1.1%	—	Metalgenix Genixcms	17/1/2017	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters.
CVE-2017-5515	Modificada	Media (5.4)	0.79%	—	Metalgenix Genixcms	17/1/2017	17/6/2026	Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.
CVE-2017-5347	Modificada	Alta (7.2)	1.4%	—	Metalgenix Genixcms	12/1/2017	17/6/2026	SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php.
CVE-2017-5346	Modificada	Alta (7.2)	1.6%	—	Genixcms	12/1/2017	17/6/2026	SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.
CVE-2017-5345	Modificada	Alta (8.8)	1.6%	—	Metalgenix Genixcms	12/1/2017	17/6/2026	SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI.
CVE-2016-10096	Modificada	Alta (7.3)	1.6%	—	Genixcms	1/1/2017	17/6/2026	SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.
CVE-2015-5066	Modificada	Media (4.3)	3.7%	💥 Exploit	Metalgenix Genixcms	24/6/2015	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) content or (2) title field in an add action in the posts page to index.php or the (3) q parameter in the posts page to index.php.
CVE-2015-2680	Modificada	Media (6.8)	3.9%	💥 Exploit	Metalgenix Genixcms	23/3/2015	17/6/2026	Cross-site request forgery (CSRF) vulnerability in MetalGenix GeniXCMS before 0.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request in the users page to gxadmin/index.php.
CVE-2015-2679	Modificada	Alta (7.5)	5.6%	💥 Exploit	Genixcms	23/3/2015	17/6/2026	Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.
CVE-2015-2678	Modificada	Media (4.3)	5.4%	💥 Exploit	Genixcms	23/3/2015	17/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter in the categories page to gxadmin/index.php or (2) page parameter to index.php.