CVE-2017-14076

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...

CVE-2017-14076

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...

Sql injection

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...

CVE-2017-14076

Summary of CVE-2017-14076 : A SQL injection exists in NexusPHP 1.5.beta5.20120707, exploitable via the id parameter to linksmanage.php in the editlink action. Affected component: NexusPHP (PHP-based resource sharing software). Root cause: unsafely concatenated user input in the linksmanage.php ed...

CVE-2017-14076

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...

Cross site scripting

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to ipsearch.php, related to PHPSELF...

CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

CVE-2017-14070

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to ipsearch.php, related to PHPSELF...

Sql injection

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

CVE-2017-14070

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to ipsearch.php, related to PHPSELF...

CVE-2017-14070

Cross Site Scripting XSS exists in NexusPHP 1.5.beta5.20120707 via the PATHINFO to ipsearch.php, related to PHPSELF...

CVE-2017-14070

The CVE-2017-14070 entry describes a Cross Site Scripting (XSS) vulnerability in NexusPHP 1.5.beta5.20120707. The issue arises via PATH_INFO to ipsearch.php and is related to PHP_SELF. Multiple sources (NVD, Red Hat, CNVD, CNVD-derived entries) confirm the affected software and the vulnerability ...

CVE-2017-14069

CVE-2017-14069 affects NexusPHP 1.5.beta5.20120707. The root cause is a SQL Injection in the usernw parameter of nowarn.php, allowing a remote attacker to execute arbitrary SQL commands. Public records in CNVD-2017-30775 corroborate the vulnerability details and impact. The connected documents do...

CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...

PT-2017-13229

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A SQL Injection issue exists via the usernw array parameter to the "nowarn.php" endpoint. Recommendations For NexusPHP version 1.5.beta5.20120707, avoid using the usernw array parameter in the...

PT-2017-13233

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A SQL Injection issue exists via the id parameter to "linksmanage.php" in an "editlink" action. Recommendations For NexusPHP version 1.5.beta5.20120707, avoid using the id parameter in the...

PT-2017-13231

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5.beta5.20120707 Description A Cross Site Scripting XSS issue exists, allowing attackers to execute malicious scripts. This is achieved by manipulating the PATH INFO to ipsearch.php, which is related to the PHP SELF variable...

CVE-2017-14076: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...

CVE-2017-14069: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php...