Lucene search
+L

32 matches found

CNVD
CNVD
added 2020/03/13 12:0 a.m.2 views

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-18325)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflective cross-site scripting vulnerability exists in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9. The...

4.8CVSS6AI score0.00611EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/13 12:0 a.m.3 views

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-18327)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflective cross-site scripting vulnerability exists in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9. The...

4.8CVSS6AI score0.00611EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/13 12:0 a.m.4 views

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-18324)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflective cross-site scripting vulnerability exists in admin/edit-category.php in Chadha PHPKB Standard Multi-Language version 9...

4.8CVSS6AI score0.00611EPSS
Exploits1References1
CNVD
CNVD
added 2020/03/13 12:0 a.m.2 views

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-18334)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflective cross-site scripting vulnerability exists in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language version 9...

4.8CVSS6AI score0.00611EPSS
Exploits1References1
OSV
OSV
added 2020/03/12 2:15 p.m.6 views

CVE-2020-10463

Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

4.8CVSS5.9AI score0.00611EPSS
Exploits1References2
OSV
OSV
added 2020/03/12 2:15 p.m.6 views

CVE-2020-10464

Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

4.8CVSS5.9AI score0.00611EPSS
Exploits1References2
OSV
OSV
added 2020/03/12 2:15 p.m.7 views

CVE-2020-10462

Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

4.8CVSS5.9AI score0.00611EPSS
Exploits1References2
Prion
Prion
added 2020/03/12 2:15 p.m.22 views

Cross site scripting

Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p...

3.5CVSS4.8AI score0.00611EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/03/12 12:0 a.m.5 views

PT-2020-12137 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the GET parameter p in the admin/edit-comment.php file. This enables attackers to perform a Reflected XSS attack...

4.8CVSS5.1AI score0.00611EPSS
Exploits1References4
seebug.org
seebug.org
added 2016/09/03 12:0 a.m.22 views

qBit /pages/getPage parameter p SQL Injection

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase import re import random import hashlib class TestPOCPOCBase: vulID = '1' ssvid version = '1.0' author =...

7.1AI score
Exploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/05/20 3:0 p.m.3 views

Apache UTF-7 Encoding Cross-Site Scripting Vulnerability

Overview The modautoindex.c module in Apache HTTP Server is vulnerable to a cross-site scripting attack. When the charset on a server-generated page is undefined, the vulnerability allows attackers to inject arbitrary scripts or HTML via the P parameter using the UTF-7 charset. Impact An attacker...

6.1CVSS6.8AI score0.26188EPSS
Exploits0References26
CVE
CVE
added 2007/09/11 6:0 p.m.56 views

CVE-2007-4805

CVE-2007-4805 affects fuzzylime (CMS) getgalldata.php in version 3.0 and earlier. A directory traversal flaw lets remote attackers include arbitrary local files by supplying .. in the p parameter. The root cause is unvalidated path input leading to local file inclusion. Public references in conne...

7.5CVSS6.4AI score0.07383EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder