EUVD-2017-4315

Malware in sbrugna...

NexusPHP reports.php file SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the reports.php file in NexusPHP version 1.5. A remote attack can exploit this vulnerability to execute arbitrary SQL commands with the 'delreport'...

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

PT-2017-12684

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the delreport parameter in the reports.php file. Recommendations For NexusPHP version 1.5, avoid...

CVE-2017-12776: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...