Nexusphp vulnerabilities

Products

• Nexusphp 14

Newest

• nexusphp Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post... CVE-2022-46890 4.3 MediumJanuary 19, 2023
• nexusphp A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote... CVE-2022-46889 EPSS 60.1% 5.4 MediumJanuary 19, 2023
• nexusphp Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow... CVE-2022-46888 6.1 MediumJanuary 19, 2023
• nexusphp Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to... CVE-2022-46887 EPSS 19.4% 9.8 CriticalJanuary 19, 2023
• nexusphp SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute... CVE-2020-24769 9.8 CriticalMarch 30, 2022
• nexusphp SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute... CVE-2020-24770 9.8 CriticalMarch 30, 2022
• nexusphp Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access... CVE-2020-24771 7.5 HighMarch 30, 2022
• nexusphp SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an... CVE-2017-14076 9.8 CriticalAugust 31, 2017
• nexusphp Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch... CVE-2017-14070 6.1 MediumAugust 31, 2017
• nexusphp SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. CVE-2017-14069 9.8 CriticalAugust 31, 2017
• nexusphp SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. CVE-2017-13669 9.8 CriticalAugust 24, 2017
• nexusphp SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. CVE-2017-12679 9.8 CriticalAugust 24, 2017
• nexusphp NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an... CVE-2017-12981 9.8 CriticalAugust 21, 2017
• nexusphp NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. CVE-2017-11651 6.1 MediumJuly 26, 2017