GeniXCMS prior to 1.1.0 allows remote malicious users to cause a denial of service (account blockage) by leveraging the mishandling of certain username substring relationships, such as the admin<script> username versus the admin username, related to register.php, User.class.php, and Type.class.php.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
genixcms genixcms |
Vulmon