EUVD-2017-5186

Malware in sbrugna...

NexusPHP staffbox.php File SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'setanswered' parameter to the staffbox.php file to...

CVE-2017-13669

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...

CVE-2017-13669: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...