SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
References
Link | Resource |
---|---|
https://github.com/bingtanguan/cve/blob/master/201701 | Exploit Third Party Advisory |
Configurations
Information
Published : 2017-08-24 10:29
Updated : 2017-08-28 08:01
NVD link : CVE-2017-13669
Mitre link : CVE-2017-13669
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
nexusphp
- nexusphp