NexusPHP SQL Injection Vulnerability (CNVD-2022-65363)

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the classes parameter...

Nexus PHP Access Control Error Vulnerability

NexusPHP is a free and open source complete PT site building solution. NexusPHP is vulnerable to an access control error that could be exploited by attackers to access published content...

NexusPHP SQL Injection Vulnerability (CNVD-2022-65365)

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

CVE-2020-24770

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2020-24770

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

Improper access control

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter...

CVE-2020-24769

NexusPHP 1.5 is vulnerable to SQL injection via takeconfirm.php, parameter 'classes'. Exploitation allows remote attackers to execute arbitrary SQL commands. This is the explicit vulnerability described across CVE-2020-24769 records (NVD, Red Hat, CNVD, CVE list, OSV, CNVD/CNNVD mirrors). Connect...

CVE-2020-24770

NexusPHP 1.5 is affected by an SQL injection in modrules.php via the id parameter, enabling remote arbitrary SQL execution. This is supported by multiple sources including CVE-2020-24770 records and CNVD/CNNVD entries noting the vulnerability in NexusPHP 1.5. Exploitation details (parameter) and ...

CVE-2020-24770

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2020-24771

CVE-2020-24771 concerns an incorrect access-control vulnerability in the NexusPHP project. Across connected docs, the affected software is NexusPHP 1.5.beta5.20120707, with the core issue described as an access-control error that allows unauthorized attackers to access published content. The Red ...

CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content...

PT-2022-8695 · Nexusphp · Nexusphp

Name of the Vulnerable Software and Affected Versions: NexusPHP version 1.5.beta5.20120707 Description: The issue is related to incorrect access control, allowing unauthorized attackers to access published content. Recommendations: For NexusPHP version 1.5.beta5.20120707, consider restricting...

NexusPHP SQL注入漏洞

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP version 1.5 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL commands via the id parameter...