Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://www.recorday.cn/about/csrf.txt |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2017-09-07T13:00:00
Updated: 2024-08-05T18:51:06.110Z
Reserved: 2017-08-11T00:00:00
Link: CVE-2017-12838

No data.

Status : Deferred
Published: 2017-09-07T13:29:00.497
Modified: 2025-04-20T01:37:25.860
Link: CVE-2017-12838

No data.