CVE-2017-14076

Critical

Published: 31/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL Injection exists in NexusPHP version 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to upgrade to the latest version of NexusPHP to mitigate this vulnerability and implement input data filtering.

Original NVD description (English source)

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.