Browse CVEs

MEDIUM 5.4 CVE-2022-46889EPSS 60% A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary… Nexusphp 1.7.33+ Fix from $1,6002023-01-19 CRITICAL 9.8 CVE-2022-46887EPSS 19% Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter… Nexusphp 1.7.33+ Fix from $2,3002023-01-19 MEDIUM 6.1 CVE-2022-46888 Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inject arbitrary web script or HTM… Nexusphp 1.7.33+ Fix from $1,6002023-01-19 CRITICAL 9.8 CVE-2020-24769 SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter. Nexusphp No fix yet Fix from $2,3002022-03-30 CRITICAL 9.8 CVE-2020-24770 SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Nexusphp No fix yet Fix from $2,3002022-03-30 HIGH 7.5 CVE-2020-24771 Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content. Nexusphp No fix yet Fix from $1,9502022-03-30 CRITICAL 9.8 CVE-2017-14076 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action. Nexusphp No fix yet Fix from $2,3002017-08-31 CRITICAL 9.8 CVE-2017-14069 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. Nexusphp No fix yet Fix from $2,3002017-08-31 MEDIUM 6.1 CVE-2017-14070 Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF. Nexusphp Mitigation only Fix from $1,6002017-08-31 CRITICAL 9.8 CVE-2017-12679 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. Nexusphp No fix yet Fix from $2,3002017-08-24 CRITICAL 9.8 CVE-2017-13669 SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. Nexusphp No fix yet Fix from $2,3002017-08-24 CRITICAL 9.8 CVE-2017-12981 NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action. Nexusphp No fix yet Fix from $2,3002017-08-21 MEDIUM 6.1 CVE-2017-11651 NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. Nexusphp No fix yet Fix from $1,6002017-07-26