CVE-2017-12908

Critical

Published: 17/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.

Attackers may gain access to sensitive data in the database, potentially leading to serious security breaches for the organization.

It is recommended to upgrade to the latest version of NexusPHP and implement proper input filtering and validation.

Original NVD description (English source)

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.