CVE-2017-14512

Critical

Published: 17/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

NexusPHP version 1.5.beta5.20120707 has an SQL Injection vulnerability in forummanage.php via the sort parameter in an editforum action. This is a different vulnerability than CVE-2017-12981.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information. Organizations should be aware of the risks associated with inadequate application security.

Recommendation

It is recommended to upgrade to the latest version of NexusPHP and implement proper input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.