CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 19/01/2023 |
| CVE-2022-46887 | 严重9.8 | Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter in takeconfirm.php; the delcheater parameter in cheaterbox.php; or the usernw parameter in nowarn.php. | 19/01/2023 |
| CVE-2020-24771 | 高危7.5 | Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content. | 30/03/2022 |
| CVE-2020-24770 | 严重9.8 | SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 30/03/2022 |
| CVE-2020-24769 | 严重9.8 | SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter. | 30/03/2022 |
| CVE-2017-14076 | 严重9.8 | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action. | 31/08/2017 |
| CVE-2017-14070 | 中危6.1 | Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch.php, related to PHP_SELF. | 31/08/2017 |
| CVE-2017-14069 | 严重9.8 | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. | 31/08/2017 |
| CVE-2017-13669 | 严重9.8 | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. | 24/08/2017 |
| CVE-2017-12679 | 严重9.8 | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. | 24/08/2017 |
| CVE-2017-12981 | 严重9.8 | NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action. | 21/08/2017 |
| CVE-2017-11651 | 中危6.1 | NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. | 26/07/2017 |