NexusPHP SQL Injection Vulnerability (CNVD-2017-220447)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the modtask.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of the...

Sql injection

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2017-12909

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2017-12909

NexusPHP 1.5 is affected by a SQL injection in modtask.php via the userid parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability is reported across multiple sources (e.g., CNVD-2017-22044, NVD CVE-2017-12909) and is exploitable remotely with no authentication r...