NetSight
critical9.8

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

Impact

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

Affected products

VendorProductAffected versions
Nexusphp ProjectNexusphp
Version 1.5

Weakness classification

References