CVE-2017-14231: Genixcms

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php.

Affected products

• Genixcms Genixcms: up to and including 1.0.2

Published 2017-09-10. Last modified 2026-06-17.