CVE-2017-12981

Critical

Published: 21/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

NexusPHP version 1.5.beta5.20120707 has an SQL Injection vulnerability in forummanage.php via the sort parameter in an addforum action.

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to upgrade to the latest version of NexusPHP and to validate and sanitize input data in the application.

Original NVD description (English source)

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.