8 matches found
CVE-2017-12655
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action...
EUVD-2017-4219
Malware in sbrugna...
EUVD-2017-4375
Malware in sbrugna...
EUVD-2022-49669
Malicious code in bioql PyPI...
CVE-2022-46890
Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum this is caused by a lack of checks performed by the /forums.php?action=post page...
CVE-2022-46889
A persistent cross-site scripting XSS vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the title parameter used in /subtitles.php...
CVE-2017-12907
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the url path to usersearch.php...
NexusPHP 1.5 SQL Injection
Exploit Title: Nexusphp.v1.5 SQL injection Vulnerability Google Dork: intitle:nexusphp Date: 2011-10-08 Author: flyh4t Software Link: http://sourceforge.net/projects/nexusphp/ Version: nexusphp.v1.5 Tested on: linux+apache CVE : CVE-2011-4026 Nexusphp is BitTorrent private tracker scripts written...