~ / search / GHSA-2f6r-892p-69g5

GHSA-2f6r-892p-69g5

GeniXCMS arbitrary PHP code execution

Source: GitHub Advisory Database (reviewed) High CVE-2017-14763

Packages

EcosystemPackageAffectedFixed in
Packagist genix/cms 1.1.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.

References

External links from the advisory. They lead to third-party sites.