26 matches found
NexusPHP Cross-Site Scripting Vulnerability (CNVD-2017-28416)
NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP v1.5. A remote attacker can inject arbitrary web script or HTML by sending parameters to the usersearch.php file to exploit the...
CVE-2017-12777
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via some parameter to usersearch.php...
Cross site scripting
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via some parameter to usersearch.php...
CVE-2017-12777
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via some parameter to usersearch.php...
CVE-2017-12777
CVE-2017-12777 is a confirmed Cross‑Site Scripting (XSS) vulnerability in NexusPHP v1.5. According to CNVD-2017-28416 and NVD details, a remote attacker can inject arbitrary web script or HTML by sending crafted parameters to the file usersearch.php, potentially affecting pages that render the vu...
