4 matches found
Sql injection
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...
7.5CVSS9.7AI score0.01497EPSS
SaveExploits1References1Affected Software1
CVE-2017-13669
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...
9.8CVSS9.8AI score0.01497EPSS
SaveExploits1References1
CVE-2017-13669
CVE-2017-13669 affects NexusPHP 1.5.beta5.20120707, with a SQL injection via the setanswered parameter to staffbox.php. The vulnerability allows an attacker to execute arbitrary SQL commands remotely. CVSS data indicate a high/critical impact (C, I, A all high) and network access with no authenti...
9.8CVSS9.7AI score0.01497EPSS
SaveExploits1References1Affected Software1
20