NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.
References
Link | Resource |
---|---|
https://github.com/rezhish/NexusPHP/blob/master/nexusphp.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2017-09-17 14:29
Updated : 2017-09-21 08:47
NVD link : CVE-2017-14512
Mitre link : CVE-2017-14512
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
nexusphp_project
- nexusphp