CVE-2017-12908

Publication date

2017-08-17 20:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.