CVE-2023-41451

CVE-2023-41451 affects phpkobo AjaxNewTicker v1.0.5. The vulnerability is a Cross Site Scripting (XSS) in the index.php component, exploitable via a crafted payload to the txt parameter, which could allow an attacker to execute arbitrary code in the context of the victim’s browser. The NVD entry ...

PT-2023-27954 · Phpkobo · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewsTicker version 1.0.5 Description: An issue in phpkobo AjaxNewsTicker allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Recommendations: For phpkobo AjaxNewsTicker version 1.0.5,...

PT-2023-27957 · Unknown · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewTicker version 1.0.5 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the "index.php" component. This enables the attacker to perform Cross Site Scripting...

PT-2023-27949 · Unknown · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewTicker version 1.0.5 Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the "index.php" component. This enables the attacker to perform Cross Site Scripting...

CVE-2023-41448

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component...

PT-2023-27951

Name of the Vulnerable Software and Affected Versions phpkobo AjaxNewTicker version 1.0.5 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the "index.php" component. This enables the attacker to perform...

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

CVE-2023-41451

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

phpkobo AjaxNewTicker code issue vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A security vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which stems from an arbitrary code execution vulnerability in the parameter reque...

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

CVE-2023-41452

CVE-2023-41452: phpkobo AjaxNewTicker v1.0.5 contains a Cross-Site Request Forgery flaw allowing a remote attacker to execute arbitrary code through a crafted payload to the txt parameter in index.php. The vulnerability is reflected by the CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) wi...

CVE-2023-41451: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

phpkobo AjaxNewTicker Cross-Site Scripting Vulnerability

phpkobo AjaxNewTicker is an application from phpkobo Inc. A security vulnerability exists in phpkobo AjaxNewTicker version v.1.0.5, which stems from a cross-site scripting XSS vulnerability in the parameter txt of the file index.php...

PT-2023-27955 · Unknown · Phpkobo Ajaxnewticker

Name of the Vulnerable Software and Affected Versions: phpkobo AjaxNewTicker version 1.0.5 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the "index.php" component. This enables the attacker to inject...

CVE-2023-41445

CVE-2023-41445 affects the PHPKobo AjaxNewTicker product, version 1.0.5. The vulnerability is a Cross-Site Scripting (XSS) flaw in the index.php component that can be triggered by a crafted payload, enabling a remote attacker to execute arbitrary code within the context of the affected applicatio...

CVE-2023-41449

CVE-2023-41449 affects phpkobo AjaxNewsTicker v1.0.5. Multiple connected sources confirm a remote code execution vulnerability via a crafted payload to the reque parameter, enabling arbitrary code execution. The issue stems from improper handling of the reque input in the application. Impact is d...

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

PT-2023-27956

Name of the Vulnerable Software and Affected Versions phpkobo AjaxNewTicker version 1.0.5 Description A Cross Site Request Forgery vulnerability allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the "index.php" component. Recommendations For phpkobo...

Free Real Estate Contact Form 1.09 - Local File Inclusion

No description provided by source. Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Directory traversal

Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...