cve/2015/CVE-2015-2679.md

### [CVE-2015-2679](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2679)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Multiple SQL injection vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php or (2) username parameter to gxadmin/login.php.

### POC

#### Reference
- http://packetstormsecurity.com/files/130770/GeniXCMS-0.0.1-SQL-Injection.html
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5232.php

#### Github
No PoCs found on GitHub currently.