Skip to content

CVE-2017-14534 Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

MediumCVSS 6.1 EPSS 0.67%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

Affected products

ProductAffected versionsFixed in
nexusphp project nexusphp = 1.5-beta5.20120707 No fix listed

References