SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.
References
Link | Resource |
---|---|
https://raw.githubusercontent.com/zhangyuhang2017/cve/master/1.txt | Exploit Third Party Advisory |
http://www.sstrunk.com/cve/nowarn.html |
Configurations
Information
Published : 2017-08-31 11:29
Updated : 2017-09-06 18:29
NVD link : CVE-2017-14069
Mitre link : CVE-2017-14069
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
nexusphp
- nexusphp