10 matches found
CVE-2020-10454
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/sitemap-generator.php by adding a question mark ? followed by the payload...
CVE-2024-10454
creationtimestamp| type| source ---|---|--- 2024-10-31 15:16:19+00:00| seen| https://t.me/cvedetector/9503...
CVE-2020-10454
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/sitemap-generator.php by adding a question mark ? followed by the payload...
CVE-2020-10454
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/sitemap-generator.php by adding a question mark ? followed by the payload...
CVE-2020-10454
The affected product is Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS vulnerability in admin/header.php caused by improper handling of URIs, enabling injection via a leading question mark and payload in admin/sitemap-generator.php. Red Hat CVEs RH:CVE-2020-10454 and RH:CVE-...
CVE-2020-10454
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/sitemap-generator.php by adding a question mark ? followed by the payload...
CVE-2019-10454
A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials...
CVE-2019-10454
A cross-site request forgery vulnerability in Jenkins Rundeck Plugin allows attackers to connect to an attacker-specified URL using attacker-specified credentials...
CVE-2019-10454
CVE-2019-10454 concerns the Jenkins Rundeck Plugin CSRF vulnerability. The issue arises because the plugin’s form validation path does not enforce proper permission checks, allowing users with Overall/Read access to Jenkins to trigger a connection test to an attacker-controlled URL using attacker...
CVE-2016-10454
CVE-2016-10454 affects Android devices with Qualcomm Snapdragon Mobile (SD 425, SD 430, SD 450, SD 625). In a QTEE API function, an array out-of-bounds index can occur, as described in the vulnerability entry with a high impact score (CVSS v3 base 9.8, CRITICAL). The connected documents place thi...