Export limit exceeded: 425979 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 16

Export CSV
CVE-2017-12798

Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12655

Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12792

Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to linksmanage.php.

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12838

Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12906

Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_resend.php.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12908

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12909

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-12910

SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-14512

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp
CVE-2017-14534

Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Nexusphp Project
Products
Nexusphp