SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI.
{ "cpe": "cpe:2.3:a:metalgenix:genixcms:0.0.8:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0.0.8" }, { "last_affected": "0.0.8" } ], "source": "CPE_STRING" }
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5345.json"
{ "source": "REFERENCES" }