234 matches found
CVE-2020-10417
Vulnerability overview (CVE-2020-10417) : Red Hat and NVD documents describe a Reflected XSS in Chadha PHPKB Standard Multi-Language 9. The issue occurs in URI handling within admin/header.php and is triggered when an attacker crafts a URL (e.g., a query string after a ?) that is reflected into p...
CVE-2020-10415
CVE-2020-10415 concerns Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS in URIs processed by admin/header.php, enabling an attacker to inject arbitrary script/HTML via a crafted query string (e.g., a payload following a ?). Related Red Hat entries (CVE-2020-10391 and CVE-2020...
CVE-2020-10413
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/import-html.php by adding a question mark ? followed by the payload...
CVE-2020-10411
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/email-harvester.php by adding a question mark ? followed by the payload...
CVE-2020-10409
Summary: CVE-2020-10409 affects Chadha PHPKB Standard Multi-Language 9; URIs parsed in admin/header.php allow a Reflected XSS in admin/edit-template.php when a payload is injected after a question mark. Affected: Chadha PHPKB Standard Multi-Language 9 (admin area). Root cause (as stated): URI han...
CVE-2020-10408
The CVE-2020-10408 entry affects Chadha PHPKB Standard Multi-Language 9. Reflected XSS is possible via URIs processed in admin/header.php, affecting admin/edit-subscriber.php when a payload is injected after a question mark. Red Hat entries corroborate the same issue affecting admin/add-article.p...
CVE-2020-10406
Chadha PHPKB Standard Multi-Language 9 contains a reflected XSS in the admin area: the way URIs are handled in admin/header.php enables injection when a payload is added after a ? in admin/edit-group.php. Connected Red Hat CVEs (CVE-2020-10391, CVE-2020-10456) describe similar URI-based XSS in ot...
CVE-2020-10405
CVE-2020-10405 affects Chadha PHPKB Standard Multi-Language 9; the issue is a Reflected XSS in admin/header.php that is exploitable via URIs when an attacker appends a question mark and payload to access admin/edit-glossary.php. The Red Hat advisories confirm the same vulnerability path affecting...
CVE-2020-10404
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-field.php by adding a question mark ? followed by the payload...
CVE-2020-10404
CVE-2020-10404 describes a Reflected XSS in Chadha PHPKB Standard Multi-Language 9 caused by how URIs are handled in admin/header.php. The vulnerability allows injecting arbitrary web script/HTML via a payload appended after a ? in URIs and is relevant to the admin path, including admin/edit-fiel...
CVE-2020-10403
CVE-2020-10403 affects Chadha PHPKB Standard Multi-Language 9: URIs mishandled in admin/header.php enable Reflected XSS in admin/edit-comment.php via a crafted query string. Exploitation details and remediation are not provided in the connected documents.
CVE-2020-10402
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-category.php by adding a question mark ? followed by the payload...
CVE-2020-10401
CVE-2020-10401: Chadha PHPKB Standard Multi-Language 9 is affected via URIs in admin/header.php, enabling Reflected XSS in admin/edit-article.php when a payload is appended after a question mark. Documented impact is Reflected XSS with arbitrary script/HTML injection; CVSS base score ~4.8 (MEDIUM...
CVE-2020-10399
The Red Hat advisories confirm CVE-2020-10399 affects Chadha PHPKB Standard Multi-Language 9, where URIs processed in admin/header.php enable Reflected XSS in admin/add-user.php by appending a ? payload. Also noted for related CVEs (10391, 10456) covering similar URI handling and Reflected XSS on...
CVE-2020-10398
CVE-2020-10398 affects Chadha PHPKB Standard Multi-Language 9. The issue arises from how URIs are handled in admin/header.php, allowing a Reflected XSS in admin/add-template.php when a payload is appended after a question mark (?payload). The Red Hat corroboration notes the same URI-handling beha...
CVE-2020-10397
CVE-2020-10397 affects Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS in URI handling within admin/header.php, exploitable via admin/add-news.php by appending a question mark ? followed by payload. The Red Hat connected records corroborate a pattern of Reflected XSS in admin...
CVE-2020-10395
The CVE-2020-10395 issue affects Chadha PHPKB Standard Multi-Language 9 and is described as a Reflected Cross-Site Scripting (XSS) vulnerability. The Red Hat entries specify that URIs handled in admin/header.php can trigger XSS in various admin pages (e.g., admin/add-group.php, admin/add-article....
CVE-2020-10394
Summary (CVE-2020-10394): The issue affects Chadha PHPKB Standard Multi-Language 9, where URIs are processed in admin/header.php, enabling a Reflected XSS in admin/add-glossary.php when a payload is injected after a question mark. The root cause is likely unsafe handling of query strings in the U...
CVE-2020-10394
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-glossary.php by adding a question mark ? followed by the payload...
CVE-2020-10393
CVE-2020-10393 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability is a Reflected XSS caused by how URIs are processed in admin/header.php, exploitable via adding a ? payload to admin/add-field.php. No remediation details are provided in the connected documents.