4 matches found
CVE-2017-13669
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...
Sql injection
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...
CVE-2017-13669
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php...
CVE-2017-13669
CVE-2017-13669 affects NexusPHP 1.5.beta5.20120707, with a SQL injection via the setanswered parameter to staffbox.php. The vulnerability allows an attacker to execute arbitrary SQL commands remotely. CVSS data indicate a high/critical impact (C, I, A all high) and network access with no authenti...