Lucene search
+L

8 matches found

NVD
NVD
•added 2020/03/12 2:15 p.m.•33 views

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS4.9AI score0.00733EPSS
SaveExploits1References2
NVD
NVD
•added 2020/03/12 2:15 p.m.•39 views

CVE-2020-10417

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-articles.php by adding a question mark ? followed by the payload...

4.8CVSS5AI score0.00611EPSS
SaveExploits1References2
Prion
Prion
•added 2020/03/12 2:15 p.m.•20 views

Cross site scripting

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

3.5CVSS4.8AI score0.00733EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2020/03/12 1:05 p.m.•64 views

CVE-2020-10471

CVE-2020-10471 affects Chadha PHPKB Standard Multi-Language 9. It exposes a reflected XSS flaw in admin/manage-articles.php via the GET parameter sort, allowing injection of arbitrary script/HTML. The issue is caused by improper handling/sanitization of the sort parameter. The provided connected ...

4.8CVSS4.8AI score0.00733EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•5 views

CVE-2020-10471: Improper Neutralization of Input During Web Page Generation

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

4.8CVSS5.7AI score0.00733EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•9 views

CVE-2020-10485: Cross-Site Request Forgery (CSRF)

CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request...

4.3CVSS5.5AI score0.00485EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/03/12 12:00 a.m.•5 views

PT-2020-12141

Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9 Description The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-articles.php" page. This enables attackers to perform a reflected XSS...

4.8CVSS0.00733EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•7 views

CVE-2020-10417: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-articles.php by adding a question mark ? followed by the payload...

4.8CVSS5.7AI score0.00611EPSS
SaveExploits1References2
Rows per page
Query Builder