VYPR
← All vendors
Vendor

Nexusphp Project

Products
1
CVEs
31
Across products
31
Status
Private

Products

1

Recent CVEs

31
View all 31 CVEs →
  • CVE-2022-46887CriJan 19, 2023
    Nexusphp Project
    Nexusphp
    risk 0.65cvss 9.8epss 0.19

    Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter in takeconfirm.php; the delcheater parameter in cheaterbox.php; or the usernw parameter in nowarn.php.

  • CVE-2020-24770CriMar 30, 2022
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

  • CVE-2020-24769CriMar 30, 2022
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter.

  • CVE-2017-14512CriSep 17, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.

  • CVE-2017-14076CriAug 31, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.

  • CVE-2017-14069CriAug 31, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.

  • CVE-2017-13669CriAug 24, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.

  • CVE-2017-12679CriAug 24, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

  • CVE-2017-12981CriAug 21, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.

  • CVE-2017-12776CriAug 18, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

  • CVE-2017-12910CriAug 17, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.

  • CVE-2017-12909CriAug 17, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.

  • CVE-2017-12908CriAug 17, 2017
    Nexusphp Project
    Nexusphp
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.

  • CVE-2017-12838HigSep 7, 2017
    Nexusphp Project
    Nexusphp
    risk 0.57cvss 8.8epss 0.01

    Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors.

  • CVE-2020-24771HigMar 30, 2022
    Nexusphp Project
    Nexusphp
    risk 0.49cvss 7.5epss 0.02

    Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content.

  • CVE-2022-46889MedJan 19, 2023
    Nexusphp Project
    Nexusphp
    risk 0.40cvss 5.4epss 0.60

    A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the title parameter used in /subtitles.php.

  • CVE-2022-46888MedJan 19, 2023
    Nexusphp Project
    Nexusphp
    risk 0.40cvss 6.1epss 0.02

    Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inject arbitrary web script or HTML via the secret parameter in /login.php; q parameter in /user-ban-log.php; query parameter in /log.php; text parameter in…

  • CVE-2017-15305MedOct 15, 2017
    Nexusphp Project
    Nexusphp
    risk 0.40cvss 6.1epss 0.01

    XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.

  • CVE-2017-12792MedOct 3, 2017
    Nexusphp Project
    Nexusphp
    risk 0.40cvss 6.1epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to…

  • CVE-2017-14534MedSep 18, 2017
    Nexusphp Project
    Nexusphp
    risk 0.40cvss 6.1epss 0.01

    Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

View all 31 CVEs →