CVE-2017-15305中 6.1XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.
CVE-2017-12792中 6.1Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administra…
CVE-2017-14512緊急 9.8NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability th…
CVE-2017-14347中 6.1NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.
CVE-2017-12906中 6.1Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_I…