CVE-2026-3135: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode News Portal Project 1.0. The impacted element is an unknown function of the file /admin/add-category.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been made...

EUVD-2025-5752

Malicious code in bioql PyPI...

CVE-2020-10392

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-category.php by adding a question mark ? followed by the payload...

CVE-2020-10480

CVE-2020-10480 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability is a cross-site request forgery (CSRF) in admin/add-category.php that allows an attacker to add a new category via a crafted request, without requiring authentication. The root cause is insufficient CSRF protection o...

CVE-2020-10392

CVE-2020-10392 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability arises from how URIs are handled in admin/header.php, enabling Reflected XSS in pages such as admin/add-category.php when a payload is injected after a question mark in the URI. The Red Hat context confirms the same ...

CVE-2020-10392

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-category.php by adding a question mark ? followed by the payload...