Vulnerabilities (CVE)

Filtered by vendor Nexusphp Subscribe
Filtered by product Nexusphp
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-14069 1 Nexusphp 1 Nexusphp 2017-09-07 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
CVE-2017-14076 1 Nexusphp 1 Nexusphp 2017-09-05 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.
CVE-2017-13669 1 Nexusphp 1 Nexusphp 2017-08-28 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
CVE-2017-12679 1 Nexusphp 1 Nexusphp 2017-08-28 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.
CVE-2017-12981 1 Nexusphp 1 Nexusphp 2017-08-25 7.5 HIGH 9.8 CRITICAL
NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.