NexusPHP SQL Injection Vulnerability (CNVD-2017-220459)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the takeconfirm.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the 'conusr'...