CVE-2017-12906

Mô tả

Tham khảo

• loid.online/cve/cve.txt · Exploit
• sstrunk.com/cve/confirm_resend.html · Third Party Advisory

Lỗ hổng khác của nexusphp

• CVE-2017-15305TRUNG BÌNH 6.1XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.
• CVE-2017-12792TRUNG BÌNH 6.1Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administra…
• CVE-2017-14534TRUNG BÌNH 6.1Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.
• CVE-2017-14512NGHIÊM TRỌNG 9.8NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability th…
• CVE-2017-14347TRUNG BÌNH 6.1NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.