317 matches found
CVE-2020-10410
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-user.php by adding a question mark ? followed by the payload...
CVE-2020-10409
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-template.php by adding a question mark ? followed by the payload...
CVE-2020-10409
Summary: CVE-2020-10409 affects Chadha PHPKB Standard Multi-Language 9; URIs parsed in admin/header.php allow a Reflected XSS in admin/edit-template.php when a payload is injected after a question mark. Affected: Chadha PHPKB Standard Multi-Language 9 (admin area). Root cause (as stated): URI han...
CVE-2020-10408
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-subscriber.php by adding a question mark ? followed by the payload...
CVE-2020-10408
The CVE-2020-10408 entry affects Chadha PHPKB Standard Multi-Language 9. Reflected XSS is possible via URIs processed in admin/header.php, affecting admin/edit-subscriber.php when a payload is injected after a question mark. Red Hat entries corroborate the same issue affecting admin/add-article.p...
CVE-2020-10407
The issue is a reflected XSS in Chadha PHPKB Standard Multi-Language 9 caused by how URIs are parsed in admin/header.php. The cve description notes it can be triggered in admin/edit-news.php by appending a payload after a question mark. Red Hat entries corroborate the URI-based XSS pattern affect...
CVE-2020-10407
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-news.php by adding a question mark ? followed by the payload...
CVE-2020-10405
CVE-2020-10405 affects Chadha PHPKB Standard Multi-Language 9; the issue is a Reflected XSS in admin/header.php that is exploitable via URIs when an attacker appends a question mark and payload to access admin/edit-glossary.php. The Red Hat advisories confirm the same vulnerability path affecting...
CVE-2020-10405
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-glossary.php by adding a question mark ? followed by the payload...
CVE-2020-10404
CVE-2020-10404 describes a Reflected XSS in Chadha PHPKB Standard Multi-Language 9 caused by how URIs are handled in admin/header.php. The vulnerability allows injecting arbitrary web script/HTML via a payload appended after a ? in URIs and is relevant to the admin path, including admin/edit-fiel...
CVE-2020-10403
CVE-2020-10403 affects Chadha PHPKB Standard Multi-Language 9: URIs mishandled in admin/header.php enable Reflected XSS in admin/edit-comment.php via a crafted query string. Exploitation details and remediation are not provided in the connected documents.
CVE-2020-10402
CVE-2020-10402 corresponds to a Reflected XSS in Chadha PHPKB Standard Multi‑Language 9. Red Hat entries corroborate the issue affecting URIs handled in admin/header.php, enabling payloads when accessing admin/edit-category.php (and related admin pages for CVEs 10391/10456). The root cause is imp...
CVE-2020-10402
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-category.php by adding a question mark ? followed by the payload...
CVE-2020-10401
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-article.php by adding a question mark ? followed by the payload...
CVE-2020-10399
The Red Hat advisories confirm CVE-2020-10399 affects Chadha PHPKB Standard Multi-Language 9, where URIs processed in admin/header.php enable Reflected XSS in admin/add-user.php by appending a ? payload. Also noted for related CVEs (10391, 10456) covering similar URI handling and Reflected XSS on...
CVE-2020-10399
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-user.php by adding a question mark ? followed by the payload...
CVE-2020-10398
CVE-2020-10398 affects Chadha PHPKB Standard Multi-Language 9. The issue arises from how URIs are handled in admin/header.php, allowing a Reflected XSS in admin/add-template.php when a payload is appended after a question mark (?payload). The Red Hat corroboration notes the same URI-handling beha...
CVE-2020-10396
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-language.php by adding a question mark ? followed by the payload...
CVE-2020-10395
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-group.php by adding a question mark ? followed by the payload...
CVE-2020-10395
The CVE-2020-10395 issue affects Chadha PHPKB Standard Multi-Language 9 and is described as a Reflected Cross-Site Scripting (XSS) vulnerability. The Red Hat entries specify that URIs handled in admin/header.php can trigger XSS in various admin pages (e.g., admin/add-group.php, admin/add-article....