Lucene search
K

120 matches found

Vulnrichment
Vulnrichment
added 2023/09/28 12:0 a.m.14 views

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

7.2AI score0.00666EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/09/28 12:0 a.m.9 views

CVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

7.8AI score0.03019EPSS
Exploits1References3
CVE
CVE
added 2023/09/28 12:0 a.m.55 views

CVE-2023-41446

CVE-2023-41446 affects phpkobo AjaxNewTicker version 1.0.5. The vulnerability is a Cross Site Scripting flaw in the index.php component, exploitable via a crafted script in the title parameter to trigger arbitrary code execution. The NVD/CVE entry rates it as CVSS v3.1 Base Score 6.1 (Medium) wit...

6.1CVSS6.4AI score0.00666EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/09/28 12:0 a.m.51 views

CVE-2023-41447

CVE-2023-41447 affects phpkobo AjaxNewTicker v1.0.5. It reports a Cross‑Site Scripting flaw that enables a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in index.php. The NVD entry lists a base score of 6.1 (Medium). Exploitation status is not provided in...

6.1CVSS6.4AI score0.00666EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/09/28 12:0 a.m.50 views

CVE-2023-41450

PHPkobo AjaxNewsTicker v1.0.5 is affected. The vulnerability allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Root cause is improper handling of the reque parameter leading to code execution. The issue has high impact (C/H/I/A = HIGH) per CVSS 3.1. ...

8.8CVSS8.7AI score0.03019EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/09/28 12:0 a.m.2 views

phpkobo AjaxNewTicker Code Injection Vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A code injection vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which originates from a vulnerability that allows remote attackers to execute arbitrary code via a crafted payload...

8.8CVSS8.1AI score0.03019EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/09/28 12:0 a.m.2 views

phpkobo AjaxNewTicker Cross-Site Scripting Vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A cross-site scripting vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which stems from the presence of a cross-site scripting vulnerability that could allow a remote attacker to execute arbitrary code via a crafted script...

6.1CVSS6.9AI score0.00666EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/09/28 12:0 a.m.1 views

phpkobo AjaxNewTicker Cross-Site Scripting Vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A cross-site scripting vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which stems from the presence of a cross-site scripting vulnerability that could allow a remote attacker to execute arbitrary code via a specially crafte...

6.1CVSS6.9AI score0.00666EPSS
Exploits1References4
OSV
OSV
added 2023/09/27 11:15 p.m.2 views

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

8.8CVSS6.1AI score0.04361EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.3 views

CVE-2023-41448

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component...

6.1CVSS6.8AI score0.00798EPSS
Exploits1References4
OSV
OSV
added 2023/09/27 11:15 p.m.1 views

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

9.8CVSS6.2AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.3 views

CVE-2023-41451

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

6.1CVSS6.8AI score0.00666EPSS
Exploits1References4
NVD
NVD
added 2023/09/27 11:15 p.m.10 views

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

8.8CVSS8.8AI score0.04361EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.2 views

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

9.8CVSS7.8AI score0.0507EPSS
Exploits1References4
OSV
OSV
added 2023/09/27 11:15 p.m.4 views

CVE-2023-41453

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component...

6.1CVSS6.1AI score0.00902EPSS
Exploits1References3
OSV
OSV
added 2023/09/27 11:15 p.m.3 views

CVE-2023-41448

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component...

6.1CVSS6.1AI score0.00798EPSS
Exploits1References3
NVD
NVD
added 2023/09/27 11:15 p.m.15 views

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

9.8CVSS9.5AI score0.0507EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.1 views

CVE-2023-41453

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component...

6.1CVSS6.8AI score0.00902EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.2 views

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

8.8CVSS7.8AI score0.04361EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/09/27 11:15 p.m.1 views

CVE-2023-41445

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component...

6.1CVSS6.8AI score0.00666EPSS
Exploits1References4
Rows per page
Query Builder