CVE-2017-14512

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.
References
Link Resource
https://github.com/rezhish/NexusPHP/blob/master/nexusphp.md Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:nexusphp_project:nexusphp:1.5:beta5.20120707:*:*:*:*:*:*

Information

Published : 2017-09-17 14:29

Updated : 2017-09-21 08:47


NVD link : CVE-2017-14512

Mitre link : CVE-2017-14512


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

nexusphp_project

  • nexusphp