Known Vulnerabilities for products from Nexusphp
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Nexusphp".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-46890 json | Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is cause... | 4.3 - MEDIUM | 2023-01-19 | 2023-01-25 |
| CVE-2022-46889 json | A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to perm... | 5.4 - MEDIUM | 2023-01-19 | 2023-01-25 |
| CVE-2022-46888 json | Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inject arb... | 6.1 - MEDIUM | 2023-01-19 | 2023-01-25 |
| CVE-2022-46887 json | Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via... | 9.8 - CRITICAL | 2023-01-19 | 2023-01-25 |
| CVE-2020-24771 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-03-30 | 2022-11-07 |
| CVE-2020-24770 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-30 | 2022-04-05 |
| CVE-2020-24769 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-30 | 2022-04-05 |
| CVE-2017-14076 json | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action. | 9.8 - CRITICAL | 2017-08-31 | 2017-09-05 |
| CVE-2017-14070 json | Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF. | 6.1 - MEDIUM | 2017-08-31 | 2017-09-05 |
| CVE-2017-14069 json | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. | 9.8 - CRITICAL | 2017-08-31 | 2017-09-07 |
| CVE-2017-13669 json | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. | 9.8 - CRITICAL | 2017-08-24 | 2017-08-28 |
| CVE-2017-12981 json | NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action. | 9.8 - CRITICAL | 2017-08-21 | 2017-08-25 |
| CVE-2017-12679 json | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. | 9.8 - CRITICAL | 2017-08-24 | 2017-08-28 |
| CVE-2017-11651 json | NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. | Not Provided | 2017-07-26 | 2025-04-20 |
Known software with vulnerabilities from Nexusphp
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Nexusphp | Nexusphp | 1.5 |