CVE-2020-10473

Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

CVE-2020-10472

Summary: CVE-2020-10472 is a reflected XSS vulnerability in Chadha PHPKB Standard Multi-Language 9, specifically in the admin/manage-templates.php page where the GET parameter “sort” can be tainted to inject arbitrary scripts. The affected component is the web application’s template management in...

CVE-2020-10472

Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

CVE-2020-10471

Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

CVE-2020-10471

CVE-2020-10471 affects Chadha PHPKB Standard Multi-Language 9. It exposes a reflected XSS flaw in admin/manage-articles.php via the GET parameter sort, allowing injection of arbitrary script/HTML. The issue is caused by improper handling/sanitization of the sort parameter. The provided connected ...

CVE-2020-10470

The CVE-2020-10470 issue affects Chadha PHPKB Standard Multi-Language version 9, where a Reflected XSS exists in admin/manage-fields.php through the GET parameter sort. Attackers can inject arbitrary web script or HTML. The primary affected component is the sort parameter in the admin/manage-fiel...

CVE-2020-10469

CVE-2020-10469 affects Chadha PHPKB Standard Multi-Language 9. Affected component: the GET parameter sort on the admin/manage-departments.php page. Root cause: reflected cross-site scripting (XSS) vulnerability that allows injecting arbitrary web script/HTML. Exploitation details are described in...

CVE-2020-10469

Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...

CVE-2020-10468

CVE-2020-10468 is a reflected XSS vulnerability in Chadha PHPKB Standard Multi-Language 9, exploitable via the GET parameter p in admin/edit-news.php. Reported across multiple sources (NVD, Red Hat, CNVD, CVE listings) with the same description: an attacker can inject arbitrary web script or HTML...

CVE-2020-10467

CVE-2020-10467 corresponds to a reflected XSS in Chadha PHPKB Standard Multi-Language 9. The vulnerability arises in admin/edit-comment.php via the GET parameter p, allowing injection of arbitrary script/HTML. Affected software: Chadha PHPKB Standard Multi-Language version 9. Underlying issue: in...

CVE-2020-10466

Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

CVE-2020-10466

CVE-2020-10466 affects Chadha PHPKB Standard Multi-Language 9. It is a reflected XSS in admin/edit-glossary.php triggered via the GET parameter p, allowing injection of arbitrary script/HTML. No exploit details are provided in the documents. A related PTSecurity advisory (PT-2020-12136) suggests ...

CVE-2020-10465

Chadha PHPKB Standard Multi-Language v9 is affected by a reflected XSS in admin/edit-category.php, exploitable via the GET parameter p to inject arbitrary script/HTML. Root cause is improper handling of user input in the p parameter. Impact is XSS in web contexts, potentially affecting admin-faci...

CVE-2020-10464

CVE-2020-10464 concerns Chadha PHPKB Standard Multi-Language 9, with a reflected XSS in admin/edit-article.php via the GET parameter p. The vulnerability allows an attacker to inject arbitrary web script or HTML when a user visits a crafted URL, affecting the affected PHPKB component and involvin...

CVE-2020-10464

Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

CVE-2020-10462

CVE-2020-10462 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability is a reflected XSS in admin/edit-field.php when processing the GET parameter p, allowing injection of arbitrary web script or HTML. Exploitation details are consistently described across multiple sources, identifying...

CVE-2020-10462

Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

CVE-2020-10461

The way comments in article.php vulnerable function in include/functions-article.php are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/manage-comments.php, via the GET parameter cmt...

CVE-2020-10457

Path Traversal in Chadha PHPKB Standard Multi-Language 9 (admin/imagepaster/image-renaming.php) allows attackers to rename any file on the webserver via POST imgName and imgUrl using ../../../’ style sequences. Affected component: image-renaming functionality; root cause: improper validation of p...

CVE-2020-10456

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/trash-box.php by adding a question mark ? followed by the payload...