critical9.8
CVE-2017-12776
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.
Impact
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexusphp Project | Nexusphp | Version 1.5 |