critical9.8
CVE-2017-13669
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
Impact
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexusphp | Nexusphp | Version 1.5 |