NexusPHP <1.7.33 - Cross-Site Scripting

NexusPHP before 1.7.33 contains multiple cross-site scripting vulnerabilities via the secret parameter in /login.php; q parameter in /user-ban-log.php; query parameter in /log.php; text parameter in /moresmiles.php; q parameter in myhr.php; or id parameter in /viewrequests.php. An attacker can...

CVE-2017-12655

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action...

CVE-2017-12798

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

EUVD-2020-17479

Malware in sbrugna...

EUVD-2020-17481

Malware in sbrugna...

EUVD-2017-6035

Malware in sbrugna...

EUVD-2017-6761

Malware in sbrugna...

EUVD-2017-4430

Malware in sbrugna...

EUVD-2017-5582

Malware in sbrugna...

EUVD-2017-4434

Malware in sbrugna...

EUVD-2017-4335

Malware in sbrugna...

EUVD-2017-6013

Malware in sbrugna...

EUVD-2017-4499

Malware in sbrugna...

EUVD-2020-17480

Malware in sbrugna...

EUVD-2011-3979

Malware in sbrugna...

EUVD-2017-5186

Malware in sbrugna...

EUVD-2017-4330

Malware in sbrugna...

EUVD-2017-4375

Malware in sbrugna...

EUVD-2017-4218

Malware in sbrugna...