CVE-2017-12776

CRITICAL

NexusPHP 1.5 - SQL Injection via reports.php delreport Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
http://sh1yan.top/shiyan/cve.txt

Scores

CVSS v3 9.8
EPSS 0.0143
EPSS Percentile 70.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
nexusphp_project/nexusphp 1.5
Published Aug 18, 2017
Tracked Since Feb 18, 2026