Skip to content
Noroxi

nexusphp records

14 published records for vendor nexusphp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 22
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2022-46887
    45Plan

    Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[]

    CriticalCVSS 9.8No exploitEPSS 19%

    nexusphp · nexusphpJan 19, 2023

  • CVE-2020-24770
    40Plan

    SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

    CriticalCVSS 9.8No exploitEPSS 2%

    nexusphp · nexusphpMar 29, 2022

  • CVE-2020-24769
    40Plan

    SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes par

    CriticalCVSS 9.8No exploitEPSS 2%

    nexusphp · nexusphpMar 29, 2022

  • CVE-2022-46889
    39Monitor

    A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject

    MediumCVSS 5.4No exploitEPSS 60%

    nexusphp · nexusphpJan 19, 2023

  • CVE-2017-13669
    39Monitor

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    nexusphp · nexusphpAug 24, 2017

  • CVE-2017-12679
    39Monitor

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    nexusphp · nexusphpAug 24, 2017

  • CVE-2017-14069
    39Monitor

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    nexusphp · nexusphpAug 31, 2017

  • CVE-2017-12981
    39Monitor

    NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.

    CriticalCVSS 9.8No exploitEPSS 1%

    nexusphp · nexusphpAug 21, 2017

  • CVE-2017-14076
    39Monitor

    SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.

    CriticalCVSS 9.8No exploitEPSS 1%

    nexusphp · nexusphpAug 31, 2017

  • CVE-2020-24771
    31Monitor

    Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content.

    HighCVSS 7.5No exploitEPSS 2%

    nexusphp · nexusphpMar 29, 2022

  • CVE-2022-46888
    24Monitor

    Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inject arbitrary web scri

    MediumCVSS 6.1Proof of conceptEPSS 2%

    nexusphp · nexusphpJan 19, 2023

  • CVE-2017-11651
    24Monitor

    NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.

    MediumCVSS 6.1No exploitEPSS 1%

    nexusphp · nexusphpJul 26, 2017

  • CVE-2017-14070
    24Monitor

    Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF.

    MediumCVSS 6.1No exploitEPSS 1%

    nexusphp · nexusphpAug 31, 2017

  • CVE-2022-46890
    17Monitor

    Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is caused by a lack of

    MediumCVSS 4.3No exploitEPSS 1%

    nexusphp · nexusphpJan 19, 2023