PT-2023-15097 · Nexusphp · Nexusphp

Name of the Vulnerable Software and Affected Versions: NexusPHP versions prior to 1.7.33 Description: The issue is caused by weak access control, allowing a remote authenticated user to edit any post in the forum. This is due to a lack of checks performed by the "forums.php?action=post" page,...

CVE-2007-3812

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...

CVE-2007-3812

SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL commands via the f parameter in a forums action to index.php...