Vulnerability index

Browse CVEs

10 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

CRITICAL 9.8 CVE-2020-24769 SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter. Nexusphp No fix yet Fix from $2,3002022-03-30 CRITICAL 9.8 CVE-2020-24770 SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Nexusphp No fix yet Fix from $2,3002022-03-30 HIGH 7.5 CVE-2020-24771 Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content. Nexusphp No fix yet Fix from $1,9502022-03-30 CRITICAL 9.8 CVE-2017-14076 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action. Nexusphp No fix yet Fix from $2,3002017-08-31 CRITICAL 9.8 CVE-2017-14069 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. Nexusphp No fix yet Fix from $2,3002017-08-31 MEDIUM 6.1 CVE-2017-14070 Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF. Nexusphp Mitigation only Fix from $1,6002017-08-31 CRITICAL 9.8 CVE-2017-12679 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. Nexusphp No fix yet Fix from $2,3002017-08-24 CRITICAL 9.8 CVE-2017-13669 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. Nexusphp No fix yet Fix from $2,3002017-08-24 CRITICAL 9.8 CVE-2017-12981 NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action. Nexusphp No fix yet Fix from $2,3002017-08-21 MEDIUM 6.1 CVE-2017-11651 NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. Nexusphp No fix yet Fix from $1,6002017-07-26