{"id":"GHSA-gjcj-fj23-5j5v","aliases":["CVE-2016-10096"],"title":"GeniXCMS SQL injection vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.","severity":"high","score":7.3,"published":"2022-05-17T02:50:57.000Z","modified":"2024-04-25T21:57:34.006Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"genix/cms","sources":[{"name":"OSV · GHSA-gjcj-fj23-5j5v","url":"https://osv.dev/vulnerability/GHSA-gjcj-fj23-5j5v"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.0.0"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.0.0"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-10096","https://github.com/semplon/GeniXCMS/issues/58","https://github.com/semplon/GeniXCMS/commit/d885eb20006099262c0278932b9f8aca3c1ac97f","https://github.com/GeniXCMS/GeniXCMS","http://www.hackersb.cn/shenji/107.html","http://www.securityfocus.com/bid/95172"],"sources":[{"name":"OSV","id":"GHSA-gjcj-fj23-5j5v","modified":"2024-04-25T21:57:34.006472Z","url":"https://osv.dev/vulnerability/GHSA-gjcj-fj23-5j5v"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","score":7.3}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T22:15:33.378Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}