CVE-2017-12908

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter...

CVE-2017-12907

The CVE-2017-12907 entry describes a Cross-Site Scripting (XSS) vulnerability in NexusPHP version 1.5 that is exploitable via the URL path to usersearch.php. The Connected documents corroborate NexusPHP 1.5 as affected, with the issue located in the usersearch.php path. There are no details here ...

CVE-2017-12910

CVE-2017-12910 is a SQL injection affecting NexusPHP 1.5, specifically in massmail.php where the or parameter enables remote execution of arbitrary SQL. The issue has been corroborated across multiple sources (NVD/CNVD/CVE listings). Root cause: unsafely constructed SQL via user-supplied input le...

CVE-2017-12908

NexusPHP 1.5 is affected by a SQL injection in takeconfirm.php via the conusr parameter. The root cause is an unsafe handling of input that allows remote attackers to execute arbitrary SQL commands. The CVE description and multiple connected sources confirm this vulnerability; however, the provid...

PT-2017-12769

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the userid parameter in the modtask.php file. Recommendations For NexusPHP version 1.5, avoid using the userid parameter...

PT-2017-12768

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the conusr parameter in the takeconfirm.php file. Recommendations For NexusPHP version 1.5, avoid using t...

CVE-2017-12910: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...

CVE-2017-12909: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2017-12907: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the url path to usersearch.php...

CVE-2017-12908: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter...

PT-2017-12767

Name of the Vulnerable Software and Affected Versions NexusPHP version v1.5 Description A Cross-Site Scripting XSS issue exists, allowing potential exploitation. The issue is related to the URL path to the usersearch.php file. Recommendations For NexusPHP version v1.5, update to a newer version...

PT-2017-12771

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the or parameter in the massmail.php file. Recommendations For NexusPHP version 1.5, consider...

NexusPHP V1.5 suffers from SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP v1.5, due to the program cheaterbox.php file fails to strictly filter the conusr parameter. Attackers can use this vulnerability to obtain...

NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-20933)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in the searchsuggest.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML with th...

CVE-2017-12798

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

CVE-2017-12798

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

CVE-2017-12798

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

Cross site scripting

Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...

CVE-2017-12798

CVE-2017-12798 concerns a Cross-Site Scripting (XSS) vulnerability in NexusPHP version 1.5, exploitable via the q parameter to searchsuggest.php. The Red Hat, CNVD, NVD, and other connected records consistently describe a reflected/online XSS risk originating from unsanitized input in the q param...

NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-28416)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP v1.5. A remote attacker can inject arbitrary web script or HTML by sending parameters to the usersearch.php file to exploit the...