Launchpad.net

CVE 2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter.

See the CVE page on Mitre.org for more details.