Vulnerability index

Browse CVEs

13 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nexusphp MEDIUM 5.4
CVE-2022-46889EPSS 60%

A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary…

Fix: 1.7.33+
Fix from $1,600 2023-01-19
Nexusphp CRITICAL 9.8
CVE-2022-46887EPSS 19%

Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter…

Fix: 1.7.33+
Fix from $2,300 2023-01-19
Nexusphp MEDIUM 6.1
CVE-2022-46888

Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inject arbitrary web script or HTM…

Fix: 1.7.33+
Fix from $1,600 2023-01-19
Nexusphp CRITICAL 9.8
CVE-2020-24769

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter.

No fix yet
Fix from $2,300 2022-03-30
Nexusphp CRITICAL 9.8
CVE-2020-24770

SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

No fix yet
Fix from $2,300 2022-03-30
Nexusphp HIGH 7.5
CVE-2020-24771

Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content.

No fix yet
Fix from $1,950 2022-03-30
Nexusphp CRITICAL 9.8
CVE-2017-14076

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.

No fix yet
Fix from $2,300 2017-08-31
Nexusphp CRITICAL 9.8
CVE-2017-14069

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.

No fix yet
Fix from $2,300 2017-08-31
Nexusphp MEDIUM 6.1
CVE-2017-14070

Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF.

Mitigation only
Fix from $1,600 2017-08-31
Nexusphp CRITICAL 9.8
CVE-2017-12679

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

No fix yet
Fix from $2,300 2017-08-24
Nexusphp CRITICAL 9.8
CVE-2017-13669

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.

No fix yet
Fix from $2,300 2017-08-24
Nexusphp CRITICAL 9.8
CVE-2017-12981

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.

No fix yet
Fix from $2,300 2017-08-21
Nexusphp MEDIUM 6.1
CVE-2017-11651

NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.

No fix yet
Fix from $1,600 2017-07-26