10 matches found
EUVD-2017-5589
Malware in sbrugna...
CVE-2017-14076
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
CVE-2017-12792
Multiple cross-site request forgery CSRF vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 linkname, 2 url, or 3 title parameter in an add action to linksmanage.php...
CVE-2017-12792: Improper Neutralization of Input During Web Page Generation
Multiple cross-site request forgery CSRF vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 linkname, 2 url, or 3 title parameter in an add action to linksmanage.php...
PT-2017-12694
Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks. This is achieved via the linkname, url, or title parameter in an add...
Sql injection
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
CVE-2017-14076
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
CVE-2017-14076
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
CVE-2017-14076: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...
PT-2017-13233
Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A SQL Injection issue exists via the id parameter to "linksmanage.php" in an "editlink" action. Recommendations For NexusPHP version 1.5.beta5.20120707, avoid using the id parameter in the...