CVE-2017-12776

Critical

Published: 18/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or modification.

It is recommended to upgrade to the latest version of NexusPHP and implement input filtering and validation to prevent SQL injection.

Original NVD description (English source)

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.