critical9.8
CVE-2017-12910
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.
Impact
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexusphp Project | Nexusphp | Version 1.5 |