SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "0.0.8"
}
],
"vendor_product": "metalgenix:genixcms",
"source": "CPE_RANGE"
}
]
}