CVE-2017-5574: Metalgenix Genixcms

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter.

Affected products

• Metalgenix Genixcms: up to and including 0.0.8

Published 2017-01-23. Last modified 2026-06-17.