İçeriğe atla
Noroxi

nexusphp project kayıtları

nexusphp project üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2017-12776
    39İzleyin

    SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport param

    KritikCVSS 9,8İstismar yokEPSS %1

    nexusphp project · nexusphp18 Ağu 2017

  • CVE-2017-12909
    39İzleyin

    SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid paramete

    KritikCVSS 9,8İstismar yokEPSS %1

    nexusphp project · nexusphp17 Ağu 2017

  • CVE-2017-12910
    39İzleyin

    SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.

    KritikCVSS 9,8İstismar yokEPSS %1

    nexusphp project · nexusphp17 Ağu 2017

  • CVE-2017-12908
    39İzleyin

    SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr para

    KritikCVSS 9,8İstismar yokEPSS %1

    nexusphp project · nexusphp17 Ağu 2017

  • CVE-2017-14512
    39İzleyin

    NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability th

    KritikCVSS 9,8İstismar yokEPSS %1

    nexusphp project · nexusphp17 Eyl 2017

  • CVE-2017-12838
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests t

    YüksekCVSS 8,8İstismar yokEPSS %1

    nexusphp project · nexusphp7 Eyl 2017

  • CVE-2017-12792
    24İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administra

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    nexusphp project · nexusphp2 Eki 2017

  • CVE-2017-15305
    24İzleyin

    XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp14 Eki 2017

  • CVE-2017-12906
    24İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_I

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp7 Eyl 2017

  • CVE-2017-14347
    24İzleyin

    NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp12 Eyl 2017

  • CVE-2017-12680
    24İzleyin

    Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp18 Ağu 2017

  • CVE-2017-12907
    24İzleyin

    Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp17 Ağu 2017

  • CVE-2017-12798
    24İzleyin

    Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp10 Ağu 2017

  • CVE-2017-12655
    24İzleyin

    Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp7 Ağu 2017

  • CVE-2017-14534
    24İzleyin

    Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp18 Eyl 2017

  • CVE-2017-12777
    24İzleyin

    Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.

    OrtaCVSS 6,1İstismar yokEPSS %1

    nexusphp project · nexusphp9 Ağu 2017