CVE-2017-12679

Critical

Published: 24/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

It is recommended to upgrade to the latest version of NexusPHP and implement input filtering and validation in the application.

Original NVD description (English source)

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.