CVE-2017-5347

SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the recipient parameter to gxadmin/index.php.

• CWE-89

• http://www.securityfocus.com/bid/95684Third Party Advisory, VDB Entry
• https://github.com/semplon/GeniXCMS/issues/61Exploit, Issue Tracking, Patch
• http://www.securityfocus.com/bid/95684Third Party Advisory, VDB Entry
• https://github.com/semplon/GeniXCMS/issues/61Exploit, Issue Tracking, Patch

Published

Jan 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5340Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1…9.8
• CVE-2017-5341The OTV parser in tcpdump before 4.9.0 has a buffer overflow…
• CVE-2017-5342In tcpdump before 4.9.0, a bug in multiple protocol parsers …
• CVE-2017-5344An issue was discovered in dotCMS through 3.6.1. The findChi…
• CVE-2017-5345SQL injection vulnerability in inc/lib/Control/Ajax/tags-aja…
• CVE-2017-5346SQL injection vulnerability in inc/lib/Control/Backend/posts…
• CVE-2017-5350Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) sof…
• CVE-2017-5351Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) so…
• CVE-2017-5356Irssi before 0.8.21 allows remote attackers to cause a denia…
• CVE-2017-5357regex.c in GNU ed before 1.14.1 allows attackers to cause a …
• CVE-2017-5358Stack-based buffer overflows in php_Easycom5_3_0.dll in Easy…
• CVE-2017-5359EasyCom SQL iPlug allows remote attackers to cause a denial …