EUVD-2017-4499

Malware in sbrugna...

Sql injection

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action...

CVE-2017-12981

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action...

CVE-2017-12981

CVE-2017-12981 affects NexusPHP 1.5.beta5.20120707 in forummanage.php. The vulnerability is an SQL Injection via the sort parameter used in an addforum action, as described in the CVE entry. The connected documents confirm the affected component and the injection vector but do not provide exploit...

CVE-2017-12981: Improper Neutralization of Special Elements used in an SQL Command

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action...

PT-2017-12820

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description The issue concerns a SQL Injection in the forummanage.php file via the sort parameter in an addforum action. Recommendations For NexusPHP version 1.5.beta5.20120707, avoid using the sort paramete...

Cross site scripting

Cross-site scripting XSS vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an addforum action to wp-admin/admin.php...

PT-2014-2392

Name of the Vulnerable Software and Affected Versions ForumPress WP Forum Server plugin versions prior to 1.7.5 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the groupid parameter in an 'addforum...