CVE-2015-3933: Metalgenix Genixcms

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.

Affected products

• Metalgenix Genixcms: up to and including 0.0.3

Published 2017-11-08. Last modified 2026-06-17.