CVE-2017-14534

NVD and multiple public feeds confirm CVE-2017-14534 affects NexusPHP 1.5.beta5.20120707. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via PATH_INFO to location.php, related to PHP_SELF. Impact is limited to partial integrity impact with no confidentiality/availability effec...

CVE-2017-14534

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

PT-2017-13512

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A Cross Site Scripting XSS issue exists, related to the PATH INFO to the "location.php" endpoint, and is connected to the PHP SELF variable. Recommendations For NexusPHP version 1.5.beta5.2012070...

CVE-2017-14534: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to location.php, related to PHPSELF...

CVE-2017-14512

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981...

CVE-2017-14512

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981...

Sql injection

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981...

CVE-2017-14512

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981...

CVE-2017-14512

NexusPHP 1.5.beta5.20120707 is affected by SQL injection in forummanage.php. The vulnerability, associated with the sort parameter in forum-management actions (including addforum/editforum), allows remote data access. Public sources (CNVD/CNVD CNVD-2017-27285 and related CVE entries) describe the...

CVE-2017-14512: Improper Neutralization of Special Elements used in an SQL Command

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981...

PT-2017-13498

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description The issue is related to SQL Injection in the forummanage.php file via the sort parameter in an editforum action. Recommendations For NexusPHP version 1.5.beta5.20120707, avoid using the sort...

NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-30114)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'returnto' parameter to the fun.php file durin...

CVE-2017-14347

NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action...

CVE-2017-14347

NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action...

Design/Logic Flaw

NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action...

CVE-2017-14347

NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action...

CVE-2017-14347

NexusPHP 1.5.beta5.20120707 is affected by an XSS vulnerability in the returnto parameter of fun.php during a delete action. Descriptions in CVE records and CNVD/NVD references indicate the issue allows script injection in NexusPHP’s admin-facing flow, with CNVD noting potential to obtain the adm...

PT-2017-13408

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the lack of proper validation in the returnto parameter to "fun.php" in a delete action,...

CVE-2017-14347: Improper Neutralization of Input During Web Page Generation

NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action...

NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-30100)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP. A remote attacker can exploit this vulnerability by sending PATHINFO to the cheaters.php or confirmresend.php file to inject arbitrary we...