security update
https://security-tracker.debian.org/tracker/DSA-6413-1
https://security-tracker.debian.org/tracker/DSA-6486-1
SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.