Nexusphp

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

1. NexusPHP <1.7.33 - Cross-Site ScriptingCVE-2022-46888Nexusphp · CVSS 6.1 · 1.6% likely

   CWE-79

2. A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the ti…CVE-2022-46889Nexusphp · CVSS 5.4 · 60% likely

   CWE-79

3. Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter in takeconfirm.php; the delch…CVE-2022-46887Nexusphp · CVSS 9.8 · 19% likely

   CWE-89

4. SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2020-24770Nexusphp · 2.4% likely

   CWE-89

5. Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content.CVE-2020-24771Nexusphp · 2.0% likely

   CWE-863

6. SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the classes parameter.CVE-2020-24769Nexusphp · 2.0% likely

   CWE-89

7. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.CVE-2017-13669Nexusphp · 1.5% likely

   CWE-89

8. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.CVE-2017-12679Nexusphp · 1.5% likely

   CWE-89

9. SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.CVE-2017-12776Nexusphp Project · 1.4% likely

   CWE-89

10. SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.CVE-2017-12909Nexusphp Project · 1.4% likely

    CWE-89

11. SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.CVE-2017-12910Nexusphp Project · 1.3% likely

    CWE-89

12. SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter.CVE-2017-12908Nexusphp Project · 1.3% likely

    CWE-89

13. Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-si…CVE-2017-12792Nexusphp Project · 1.2% likely

    CWE-79

14. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php.CVE-2017-14069Nexusphp · 1.2% likely

    CWE-89

15. NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.CVE-2017-12981Nexusphp · 1.2% likely

    CWE-89

16. SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action.CVE-2017-14076Nexusphp · 1.1% likely

    CWE-89

17. NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an editforum action, a different vulnerability than CVE-2017-12981.CVE-2017-14512Nexusphp Project · 1.1% likely

    CWE-89

18. XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.CVE-2017-15305Nexusphp Project · 0.9% likely

    CWE-79

19. Multiple cross-site scripting (XSS) vulnerabilities in NexusPHP allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) cheaters.php or (2) confirm_…CVE-2017-12906Nexusphp Project · 0.8% likely

    CWE-79

20. NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.CVE-2017-14347Nexusphp Project · 0.7% likely

    CWE-79

21. Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.CVE-2017-12680Nexusphp Project · 0.7% likely

    CWE-79

22. NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.CVE-2017-11651Nexusphp · 0.7% likely

    CWE-79

23. Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.CVE-2017-14534Nexusphp Project · 0.7% likely

    CWE-79

24. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.CVE-2017-12907Nexusphp Project · 0.7% likely

    CWE-79

25. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.CVE-2017-12798Nexusphp Project · 0.7% likely

    CWE-79

26. Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.CVE-2017-12655Nexusphp Project · 0.7% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.