CVE-2017-12909

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2017-12909

NexusPHP 1.5 is affected by a SQL injection in modtask.php via the userid parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability is reported across multiple sources (e.g., CNVD-2017-22044, NVD CVE-2017-12909) and is exploitable remotely with no authentication r...