CVE-2022-46887

PoC —

CVSS 3.1

9.8 critical

EPSS

19%p97

Published

Jan 19, 2023 (Jan 19, 2023)

Modified

Jun 17, 2026

Description

Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter in takeconfirm.php; the delcheater parameter in cheaterbox.php; or the usernw parameter in nowarn.php.

Vendors: nexusphp
Products: nexusphp
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (19.4%)

In the news0 stories

No ingested article mentions this CVE yet.