Security Advisory
CVE-2017-5345
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI.