Lucene search
K

120 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 4:17 a.m.7 views

CVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

8.8CVSS7.8AI score0.03019EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:17 a.m.6 views

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

6.1CVSS7.2AI score0.00666EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:17 a.m.5 views

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

9.8CVSS7.8AI score0.0507EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 4:16 a.m.8 views

CVE-2023-41445

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component...

6.1CVSS7.3AI score0.00666EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:33 a.m.6 views

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

8.8CVSS7.8AI score0.04361EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 1:10 a.m.7 views

CVE-2010-1063

Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...

6.8CVSS7.5AI score0.00132EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:10 a.m.3 views

CVE-2010-1061

Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 url/app/common.inc.php and 2 codelib/cfg/common.inc.php...

6.8CVSS7.5AI score0.00132EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:10 a.m.6 views

CVE-2010-1059

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter. NOTE: the provenance of this...

6.8CVSS7.4AI score0.00145EPSS
Exploits1References1
OSV
OSV
added 2023/09/30 3:15 p.m.1 views

CVE-2023-5313

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

3.7CVSS4.8AI score0.00075EPSS
Exploits1References3
NVD
NVD
added 2023/09/30 3:15 p.m.10 views

CVE-2023-5313

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.3AI score0.00075EPSS
Exploits1References3
Prion
Prion
added 2023/09/30 3:15 p.m.17 views

Design/Logic Flaw

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5CVSS4.5AI score0.00075EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/09/30 3:0 p.m.52 views

CVE-2023-5313

CVE-2023-5313 affects phpkobo Ajax Poll Script 3.18, specifically the file ajax-poll.php in the Poll Handler. The provided documents describe a vulnerability due to improper enforcement of a single, unique action, enabling a remote attack and with the exploit disclosed publicly (VDB-240949). The ...

5.3CVSS4.7AI score0.00075EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/09/30 3:0 p.m.13 views

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.7AI score0.00075EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/09/30 3:0 p.m.10 views

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS6.9AI score0.00075EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/09/30 12:0 a.m.3 views

PT-2023-32033 · Unknown · Phpkobo Ajax Poll Script

Name of the Vulnerable Software and Affected Versions: phpkobo Ajax Poll Script version 3.18 Description: A problematic vulnerability was found in the phpkobo Ajax Poll Script, affecting an unknown functionality of the file ajax-poll.php of the component Poll Handler. This vulnerability leads to...

5.3CVSS6.9AI score0.00075EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/09/30 12:0 a.m.3 views

phpkobo Ajax Poll Script Competition Condition Issue Vulnerability

phpkobo Ajax Poll Script is a free Ajax script from phpkobo. A Competitive Conditions Issue vulnerability exists in phpkobo Ajax Poll Script version 3.18. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

5.3CVSS6.7AI score0.00075EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/28 3:15 a.m.2 views

CVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

8.8CVSS7.8AI score0.03019EPSS
Exploits1References4
OSV
OSV
added 2023/09/28 3:15 a.m.2 views

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

6.1CVSS6.1AI score0.00666EPSS
Exploits1References3
OSV
OSV
added 2023/09/28 3:15 a.m.3 views

CVE-2023-41447

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component...

6.1CVSS6.2AI score0.00666EPSS
Exploits1References3
Prion
Prion
added 2023/09/28 3:15 a.m.16 views

Cross site scripting

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

5.8CVSS6.3AI score0.00666EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder