Executive brief
GeniXCMS, a content management system used for building websites, contains a critical security flaw in its registration component. An unauthenticated attacker can send specially crafted requests to the registration page to gain unauthorized access to the underlying database. This could result in the theft of sensitive user information, modification of website content, or a complete takeover of the site.
Technical details
A SQL injection vulnerability exists in the 'register.php' script of GeniXCMS versions prior to 1.0.0. The flaw is located in the handling of the 'activation' parameter, which is not properly sanitized before being used in a database query. An unauthenticated remote attacker can exploit this by sending a crafted HTTP request containing SQL commands. Successful exploitation allows for arbitrary database manipulation, including data exfiltration, credential theft, or administrative bypass. The issue was addressed in the v1.0.0 release.
Affected products
- GeniXCMS GeniXCMS before 1.0.0
Timeline
- 2017-01-22: patched: GeniXCMS v1.0.0 released fixing security issues.
- 2017-01-23: advisory: NVD published CVE-2017-5574.