SQL Injection in NexusPHP 1.5.beta5.20120707 via sort parameter in editforum action

SQL Injection in NexusPHP 1.5.beta5.20120707 via sort parameter in editforum action

CVE-2017-14512 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.