Sql injection

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24769

NexusPHP 1.5 is vulnerable to SQL injection via takeconfirm.php, parameter 'classes'. Exploitation allows remote attackers to execute arbitrary SQL commands. This is the explicit vulnerability described across CVE-2020-24769 records (NVD, Red Hat, CNVD, CVE list, OSV, CNVD/CNNVD mirrors). Connect...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24770

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2020-24770

NexusPHP 1.5 is affected by an SQL injection in modrules.php via the id parameter, enabling remote arbitrary SQL execution. This is supported by multiple sources including CVE-2020-24770 records and CNVD/CNNVD entries noting the vulnerability in NexusPHP 1.5. Exploitation details (parameter) and ...

CVE-2020-24770

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2020-24771

CVE-2020-24771 concerns an incorrect access-control vulnerability in the NexusPHP project. Across connected docs, the affected software is NexusPHP 1.5.beta5.20120707, with the core issue described as an access-control error that allows unauthorized attackers to access published content. The Red ...

CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

PT-2022-8695 · Nexusphp · Nexusphp

Name of the Vulnerable Software and Affected Versions: NexusPHP version 1.5.beta5.20120707 Description: The issue is related to incorrect access control, allowing unauthorized attackers to access published content. Recommendations: For NexusPHP version 1.5.beta5.20120707, consider restricting...

CVE-2020-24771: Incorrect Authorization

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

NexusPHP security vulnerabilities

NexusPHP is a free and open source complete PT site building solution. NexusPHP is vulnerable to an access control error that could be exploited by attackers to access published content...

NexusPHP SQL Injection Vulnerability

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24769: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

PT-2022-8693

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to execute arbitrary SQL commands via the classes parameter in the takeconfirm.php file. This enables attackers to manipulate database queries, potentially leading to...

NexusPHP SQL Injection Vulnerability

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2022-8694

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the modrules.php file. This enables attackers to manipulate database queries, potentially leading to unauthorized data...

CVE-2020-24770: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

NexusPHP Cross-Site Request Forgery Vulnerability (CNVD-2018-10475)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. Multiple cross-site request forgery vulnerabilities exist in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to perform unauthorized operations with the help of 'linkname'...