Nexusphp Project Nexusphp vulnerabilities

• nexusphp project nexusphp XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php. CVE-2017-15305 6.1 MediumOctober 15, 2017
• nexusphp project nexusphp Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers... CVE-2017-12792 Public exploit 6.1 MediumOctober 2, 2017
• nexusphp project nexusphp Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location... CVE-2017-14534 6.1 MediumSeptember 18, 2017
• nexusphp project nexusphp NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an... CVE-2017-14512 9.8 CriticalSeptember 17, 2017
• nexusphp project nexusphp NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action. CVE-2017-14347 6.1 MediumSeptember 12, 2017
• nexusphp project nexusphp Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject... CVE-2017-12906 6.1 MediumSeptember 7, 2017
• nexusphp project nexusphp Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack... CVE-2017-12838 8.8 HighSeptember 7, 2017
• nexusphp project nexusphp SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute... CVE-2017-12776 9.8 CriticalAugust 18, 2017
• nexusphp project nexusphp Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php. CVE-2017-12680 6.1 MediumAugust 18, 2017
• nexusphp project nexusphp SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute... CVE-2017-12910 9.8 CriticalAugust 17, 2017
• nexusphp project nexusphp SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute... CVE-2017-12909 9.8 CriticalAugust 17, 2017
• nexusphp project nexusphp SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute... CVE-2017-12908 9.8 CriticalAugust 17, 2017
• nexusphp project nexusphp Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php. CVE-2017-12907 6.1 MediumAugust 17, 2017
• nexusphp project nexusphp Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php. CVE-2017-12798 6.1 MediumAugust 10, 2017
• nexusphp project nexusphp Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php. CVE-2017-12777 6.1 MediumAugust 9, 2017
• nexusphp project nexusphp Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in... CVE-2017-12655 6.1 MediumAugust 7, 2017