CVE-2020-10398: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-template.php by adding a question mark ? followed by the payload...

CVE-2020-10488: Cross-Site Request Forgery (CSRF)

CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request...

CVE-2020-10504: Cross-Site Request Forgery (CSRF)

CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request...

CVE-2020-10494: Cross-Site Request Forgery (CSRF)

CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request...

CVE-2020-10495: Cross-Site Request Forgery (CSRF)

CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request...

CVE-2020-10491: Cross-Site Request Forgery (CSRF)

CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request...

PT-2020-12099 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

PT-2020-12157 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete a glossary term via a crafted request to the admin/manage-glossary.php endpoint. This is made possible by a CSRF flaw. Recommendations: For Chadh...

PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multi SQL Injection Vulnerabilities

No description provided by source...

PHPKB Knowledge Base Software 2 SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:PHPKB Knowledge Base Software v2 Multilanguage Supportcomment.php IDsuffer from Sql Injection Vulnerability Vendor: www.knowledgebase-script.com ? Software: PHPKB Knowledge Base Software v2 Multilanguage...

PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections

PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections + In The Name Of Allah The Mercifull + Tybe: PHPKB Knowledge Base Software v2 Multilanguage Support Multi SQL Injection Vulnerabilities Vendor: www.knowledgebase-script.com + Software:PHPKB Knowledge Base Software v...

PHPKB Knowledge Base Software 2.0 - Multilanguage Support Multiple SQL Injections

In The Name Of Allah The Mercifull + Tybe: PHPKB Knowledge Base Software v2 Multilanguage Support Multi SQL Injection Vulnerabilities Vendor: www.knowledgebase-script.com + Software:PHPKB Knowledge Base Software v2 Multilanguage Support - + author: R3d-D3v!L + TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY...

CVE-2008-5088

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

Sql injection

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

CVE-2008-5088

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

CVE-2008-5088

CVE-2008-5088 describes SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional. The vulnerability affects the ID parameter in two scripts, email.php and question.php, enabling remote attackers to execute arbitrary SQL commands. The connected documents provide concrete det...

CVE-2008-5088: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

phpkb-1.5-question.php.txt

PHPKB Knowledge Base Software v1.5 Professional question.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

No description provided by source. PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

phpkb-1.5-email.php.txt

PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected] ----------------------------------------------------------...