CVE-2017-12910

Critical

Published: 17/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-12910 is an SQL injection vulnerability in massmail.php in NexusPHP 1.5 that allows remote attackers to execute arbitrary SQL commands via the or parameter.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.

Recommendation

It is recommended to upgrade to the latest version of NexusPHP and implement input filtering and validation to minimize the risk of SQL injection attacks.

Original NVD description (English source)

SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.