Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 6.1
CVE-2017-15305
XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-12792
Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for …
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-14534
Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.
Nexusphp
No fix yet
CRITICAL 9.8
CVE-2017-14512
NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-20…
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-14347
NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.
Nexusphp
No fix yet
HIGH 8.8
CVE-2017-12838
Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) s…
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-12906
Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1…
Nexusphp
No fix yet
CRITICAL 9.8
CVE-2017-12776
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-12680
Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.
Nexusphp
No fix yet
CRITICAL 9.8
CVE-2017-12908
SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.
Nexusphp
No fix yet
CRITICAL 9.8
CVE-2017-12909
SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Nexusphp
No fix yet
CRITICAL 9.8
CVE-2017-12910
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-12907
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-12798
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.
Nexusphp
No fix yet
MEDIUM 6.1
CVE-2017-12777
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.
Nexusphp
Mitigation only
MEDIUM 6.1
CVE-2017-12655
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.
Nexusphp
No fix yet