318 matches found
PT-2017-12652
Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description A Cross-Site Scripting XSS issue exists, allowing for potential code injection. The issue is related to the type parameter in the "shoutbox.php" endpoint. Recommendations For NexusPHP version 1.5, avoid using t...
CVE-2017-12776: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...
PT-2017-12684
Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the delreport parameter in the reports.php file. Recommendations For NexusPHP version 1.5, avoid...
CVE-2017-12680: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS exists in NexusPHP 1.5 via the type parameter to shoutbox.php...
Cross site scripting
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the url path to usersearch.php...
Sql injection
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...
Sql injection
SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter...
CVE-2017-12910
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...
CVE-2017-12908
SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter...
CVE-2017-12907
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the url path to usersearch.php...
CVE-2017-12909
SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2017-12909
SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Sql injection
SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2017-12907
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the url path to usersearch.php...
CVE-2017-12908
SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter...
CVE-2017-12910
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...
CVE-2017-12907
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the url path to usersearch.php...
CVE-2017-12909
NexusPHP 1.5 is affected by a SQL injection in modtask.php via the userid parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability is reported across multiple sources (e.g., CNVD-2017-22044, NVD CVE-2017-12909) and is exploitable remotely with no authentication r...