11702 matches found
Cross site request forgery (csrf)
CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request...
Cross site scripting
Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-comment.php by adding a question mark ? followed by the payload...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...
Cross site scripting
Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...
Cross site request forgery (csrf)
CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request...
Cross site request forgery (csrf)
CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request...
Cross site scripting
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-template.php by adding a question mark ? followed by the payload...
Cross site request forgery (csrf)
CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request...
CVE-2020-10504
CVE-2020-10504 affects Chadha PHPKB Standard Multi-Language 9, where a CSRF flaw in admin/edit-comments.php enables an attacker to edit a comment by supplying an id via a crafted request. The vulnerability stems from insufficient CSRF protection in the affected endpoint, allowing unauthorized sta...
CVE-2020-10498
CVE-2020-10498 affects Chadha PHPKB Standard Multi-Language 9. A CSRF vulnerability in admin/edit-category.php allows an attacker to edit a category by sending a crafted request (no explicit authentication bypass described). Root cause: missing/insufficient CSRF protection on the edit-category en...
CVE-2020-10496
Chadha PHPKB Standard Multi-Language 9 is vulnerable to a Cross-Site Request Forgery (CSRF) in the admin/edit-article.php endpoint. The vulnerability allows an attacker to cause article edits by crafting a request that an authenticated user would submit, due to insufficient validation/CSRF protec...
CVE-2020-10495
CVE-2020-10495 is a CSRF vulnerability affecting Chadha PHPKB Standard Multi-Language 9. Assaults can edit an article template via crafted requests to admin/edit-template.php (requires id). Root cause is a CSRF weakness in the web application’s handling of template edits. The NVD entry lists a CV...
CVE-2020-10494
CVE-2020-10494 is a CSRF vulnerability in Chadha PHPKB Standard Multi-Language 9 affecting the admin/edit-news.php endpoint. Affected component is the news-editing function; root cause is CSRF weakness allowing an attacker to edit a news article when a user with appropriate session interacts with...
CVE-2020-10468
CVE-2020-10468 is a reflected XSS vulnerability in Chadha PHPKB Standard Multi-Language 9, exploitable via the GET parameter p in admin/edit-news.php. Reported across multiple sources (NVD, Red Hat, CNVD, CVE listings) with the same description: an attacker can inject arbitrary web script or HTML...
CVE-2020-10467
CVE-2020-10467 corresponds to a reflected XSS in Chadha PHPKB Standard Multi-Language 9. The vulnerability arises in admin/edit-comment.php via the GET parameter p, allowing injection of arbitrary script/HTML. Affected software: Chadha PHPKB Standard Multi-Language version 9. Underlying issue: in...
CVE-2020-10466
CVE-2020-10466 affects Chadha PHPKB Standard Multi-Language 9. It is a reflected XSS in admin/edit-glossary.php triggered via the GET parameter p, allowing injection of arbitrary script/HTML. No exploit details are provided in the documents. A related PTSecurity advisory (PT-2020-12136) suggests ...
CVE-2020-10465
Chadha PHPKB Standard Multi-Language v9 is affected by a reflected XSS in admin/edit-category.php, exploitable via the GET parameter p to inject arbitrary script/HTML. Root cause is improper handling of user input in the p parameter. Impact is XSS in web contexts, potentially affecting admin-faci...
CVE-2020-10464
CVE-2020-10464 concerns Chadha PHPKB Standard Multi-Language 9, with a reflected XSS in admin/edit-article.php via the GET parameter p. The vulnerability allows an attacker to inject arbitrary web script or HTML when a user visits a crafted URL, affecting the affected PHPKB component and involvin...
