CVE-2020-10440

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-article-mailed.php by adding a question mark ? followed by the payload...

CVE-2020-10438

CVE-2020-10438 affects Chadha PHPKB Standard Multi-Language 9: the URI handling in admin/header.php enables Reflected XSS in admin/reply-ticket.php when a payload is injected after a '?'. The Red Hat CVEs confirm similar patterns for related endpoints (e.g., admin/add-article.php), but the provid...

CVE-2020-10436

CVE-2020-10436 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability is a Reflected XSS in the URI handling of admin/header.php, enabling injection of arbitrary scripts/HTML in admin/my-profile.php when a crafted URI containing a leading question mark and payload is used. The Red Hat ...

CVE-2020-10435

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/my-languages.php by adding a question mark ? followed by the payload...

CVE-2020-10434

CVE-2020-10434 concerns Chadha PHPKB Standard Multi-Language 9. The issue arises from how URIs are processed in admin/header.php, enabling a Reflected XSS by appending a question mark followed by payload to admin/manage-versions.php. Connected Red Hat CVEs (CVE-2020-10391 and CVE-2020-10456) desc...

CVE-2020-10429

CVE-2020-10429 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability arises from how URIs are handled in admin/header.php, enabling Reflected XSS in admin/manage-settings.php when a payload is appended after a question mark. The description notes injection of arbitrary scripts/HTML vi...

CVE-2020-10429

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-settings.php by adding a question mark ? followed by the payload...

CVE-2020-10426

CVE-2020-10426 concerns Chadha PHPKB Standard Multi-Language 9. The issue arises from how URIs are processed in admin/header.php, enabling Reflected XSS by appending a payload after a question mark to admin pages (as shown for manage-groups.php; related Red Hat entries also reference add-article....

CVE-2020-10426

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-groups.php by adding a question mark ? followed by the payload...

CVE-2020-10425

The provided connected documents identify a Reflected XSS in Chadha PHPKB Standard Multi-Language 9, caused by how URIs are handled in admin/header.php. The vulnerability is triggered by crafting a URI with a leading question mark and a payload, affecting admin pages such as admin/manage-glossary...

CVE-2020-10424

CVE-2020-10424 affects Chadha PHPKB Standard Multi-Language 9, where URIs mishandling in admin/header.php enables reflected XSS in admin/manage-fields.php by appending a ? payload. Impact is reflected script/HTML injection; exploitation details not provided beyond this description. The cited metr...

CVE-2020-10423

CVE-2020-10423 is a reflected XSS in Chadha PHPKB Standard Multi-Language 9 caused by improper URI handling in admin/header.php, exploitable via URIs on admin pages such as admin/manage-feedbacks.php (and related pages listed in Red Hat advisories). The Red Hat records attribute the issue to URIs...

CVE-2020-10419

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-categories.php by adding a question mark ? followed by the payload...

CVE-2020-10417

Vulnerability overview (CVE-2020-10417) : Red Hat and NVD documents describe a Reflected XSS in Chadha PHPKB Standard Multi-Language 9. The issue occurs in URI handling within admin/header.php and is triggered when an attacker crafts a URL (e.g., a query string after a ?) that is reflected into p...

CVE-2020-10415

CVE-2020-10415 concerns Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS in URIs processed by admin/header.php, enabling an attacker to inject arbitrary script/HTML via a crafted query string (e.g., a payload following a ?). Related Red Hat entries (CVE-2020-10391 and CVE-2020...

CVE-2020-10413

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/import-html.php by adding a question mark ? followed by the payload...

CVE-2020-10411

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/email-harvester.php by adding a question mark ? followed by the payload...

CVE-2020-10409

Summary: CVE-2020-10409 affects Chadha PHPKB Standard Multi-Language 9; URIs parsed in admin/header.php allow a Reflected XSS in admin/edit-template.php when a payload is injected after a question mark. Affected: Chadha PHPKB Standard Multi-Language 9 (admin area). Root cause (as stated): URI han...

CVE-2020-10408

The CVE-2020-10408 entry affects Chadha PHPKB Standard Multi-Language 9. Reflected XSS is possible via URIs processed in admin/header.php, affecting admin/edit-subscriber.php when a payload is injected after a question mark. Red Hat entries corroborate the same issue affecting admin/add-article.p...

CVE-2020-10406

Chadha PHPKB Standard Multi-Language 9 contains a reflected XSS in the admin area: the way URIs are handled in admin/header.php enables injection when a payload is added after a ? in admin/edit-group.php. Connected Red Hat CVEs (CVE-2020-10391, CVE-2020-10456) describe similar URI-based XSS in ot...