CVE-2013-7289

The CVE identifies multiple cross-site scripting (XSS) vulnerabilities in Andy’s PHP Knowledgebase (Aphpkb) before version 0.95.8, exploitable via the register.php endpoint. Specifically, the first_name, last_name, email, or username parameters can be injected with malicious script/HTML to affect...

PT-2014-3335

Name of the Vulnerable Software and Affected Versions Aphpkb versions prior to 0.95.8 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters. The vulnerable parameters include first name, last name, email, and username. Recommendations For...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to saa.php, 2 username parameter to login.php, or 3 keywordlist parameter to keysearch.php...

CVE-2013-7277

Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to saa.php, 2 username parameter to login.php, or 3 keywordlist parameter to keysearch.php...

CVE-2013-7277

Andy’s PHP Knowledgebase (Aphpkb) is affected by CVE-2013-7277 via multiple XSS vectors in versions before 0.95.8: (1) HTTP Referer header to saa.php, (2) username parameter to login.php, and (3) keyword_list parameter to keysearch.php. The underlying issue enables a remote attacker to inject arb...

CVE-2013-7277: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to saa.php, 2 username parameter to login.php, or 3 keywordlist parameter to keysearch.php...

PT-2014-3326

Name of the Vulnerable Software and Affected Versions Aphpkb versions prior to 0.95.8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the HTTP Referer...

Aphpkb 0.95.4 PHP Execution

------------------------------------------------------------------------ --PoC--...

CVE-2011-1555

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase Aphpkb 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase Aphpkb 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter...

Sql injection

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase Aphpkb 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information...

CVE-2011-1555

SQL injection vulnerability in saa.php in Andy's PHP Knowledgebase Aphpkb 0.95.3 and earlier allows remote attackers to execute arbitrary SQL commands via the aid parameter, a different vulnerability than CVE-2011-1546. NOTE: some of these details are obtained from third party information...

CVE-2011-1556

SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase Aphpkb 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter...

CVE-2011-1555

CVE-2011-1555 affects Andy's PHP Knowledgebase (Aphpkb) up to version 0.95.3, via a SQL injection in saa.php exposed by the aid parameter. Public sources (NVD/Red Hat and related feeds) describe the vulnerability as allowing remote attackers to execute arbitrary SQL commands, with the impact limi...

CVE-2011-1556

CVE-2011-1556 describes an SQL injection in Andy’s PHP Knowledgebase (Aphpkb) 0.95.4, specifically in plugins/pdfClasses/pdfgen.php where the pdfa parameter can be manipulated to execute arbitrary SQL commands remotely. Affected component is the pdfgen.php module within pdfClasses. The available ...

CVE-2011-1546

CVE-2011-1546 affects Andy's PHP Knowledgebase (Aphpkb) prior to 0.95.3. Multiple SQL injection vulnerabilities exist in the application: via the s parameter to a_viewusers.php and keysearch.php; and via id, start (pending.php) or aid (a_authordetails.php) when accessed by authenticated admins. T...

CVE-2011-1546: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase Aphpkb before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to 1 aviewusers.php or 2 keysearch.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 3 id...

PT-2011-3207

Name of the Vulnerable Software and Affected Versions Aphpkb versions prior to 0.95.3 Description The issue allows remote attackers to execute arbitrary SQL commands, potentially leading to data manipulation or extraction. This can be achieved through various API endpoints, including "a...

PT-2011-3212

Name of the Vulnerable Software and Affected Versions Aphpkb versions 0.95.3 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the aid parameter in the saa.php file. Recommendations For versions 0.95.3 and earlier, update to a versio...

PT-2011-3213

Name of the Vulnerable Software and Affected Versions Aphpkb version 0.95.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the pdfa parameter in the plugins/pdfClasses/pdfgen.php plugin. Recommendations For Aphpkb version 0.95.4, consider...