CVE-2015-2679

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.

• CWE-89

• http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17Patch
• http://blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16Vendor Advisory
• http://osvdb.org/show/osvdb/119392
• http://osvdb.org/show/osvdb/119393
• http://packetstormsecurity.com/files/130770/GeniXCMS-0.0.1-SQL-Injection.htmlExploit
• http://www.exploit-db.com/exploits/36321Exploit
• http://www.securityfocus.com/bid/73297
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5232.phpExploit
• https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815
• https://github.com/semplon/GeniXCMS/issues/7
• http://blog.metalgenix.com/genixcms-v0-0-2-release-security-and-bug-fixes/17Patch
• http://blog.metalgenix.com/update-security-fix-and-add-newsletter-module/16Vendor Advisory
• http://osvdb.org/show/osvdb/119392
• http://osvdb.org/show/osvdb/119393
• http://packetstormsecurity.com/files/130770/GeniXCMS-0.0.1-SQL-Injection.htmlExploit
• http://www.exploit-db.com/exploits/36321Exploit
• http://www.securityfocus.com/bid/73297
• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5232.phpExploit
• https://github.com/semplon/GeniXCMS/commit/698245488343396185b1b49e7482ee5b25541815
• https://github.com/semplon/GeniXCMS/issues/7

Published

Mar 23, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2673The ec_ajax_update_option and ec_ajax_clear_all_taxrates fun…
• CVE-2015-2674Restkit allows man-in-the-middle attackers to spoof TLS serv…
• CVE-2015-2675The OAuth implementation in librest before 0.7.93 incorrectl…
• CVE-2015-2676Cross-site request forgery (CSRF) vulnerability in the ASUS …
• CVE-2015-2677Multiple cross-site scripting (XSS) vulnerabilities in ocPor…
• CVE-2015-2678Multiple cross-site scripting (XSS) vulnerabilities in Metal…
• CVE-2015-2680Cross-site request forgery (CSRF) vulnerability in MetalGeni…
• CVE-2015-2681Multiple cross-site scripting (XSS) vulnerabilities in the A…
• CVE-2015-2682Citrix Command Center before 5.1 Build 35.4 and 5.2 before B…
• CVE-2015-2683Citrix Command Center before 5.1 Build 35.4 and 5.2 before B…
• CVE-2015-2684Shibboleth Service Provider (SP) before 2.5.4 allows remote …
• CVE-2015-2686net/socket.c in the Linux kernel 3.19 before 3.19.3 does not…