Lucene search
+L

137 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:17 a.m.•18 views

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

6.1CVSS7.2AI score0.0066EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:17 a.m.•17 views

CVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

8.8CVSS7.8AI score0.01236EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:17 a.m.•20 views

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

9.8CVSS7.8AI score0.01405EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:16 a.m.•20 views

CVE-2023-41445

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component...

6.1CVSS7.3AI score0.00613EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:33 a.m.•18 views

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component...

8.8CVSS7.8AI score0.00539EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:10 a.m.•18 views

CVE-2010-1063

Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 codelib/cfg/common.inc.php, 2...

6.8CVSS7.5AI score0.01356EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:10 a.m.•12 views

CVE-2010-1061

Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter to 1 url/app/common.inc.php and 2 codelib/cfg/common.inc.php...

6.8CVSS7.5AI score0.01356EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 1:10 a.m.•17 views

CVE-2010-1059

Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANGCODE parameter. NOTE: the provenance of this...

6.8CVSS7.4AI score0.01333EPSS
SaveExploits1References1
OSV
OSV
•added 2023/09/30 3:15 p.m.•15 views

CVE-2023-5313

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

3.7CVSS4.8AI score0.00583EPSS
SaveExploits1References3
NVD
NVD
•added 2023/09/30 3:15 p.m.•37 views

CVE-2023-5313

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.3AI score0.00583EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/30 3:15 p.m.•30 views

Design/Logic Flaw

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5CVSS4.5AI score0.00583EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/09/30 3:00 p.m.•73 views

CVE-2023-5313

CVE-2023-5313 affects phpkobo Ajax Poll Script 3.18, specifically the file ajax-poll.php in the Poll Handler. The provided documents describe a vulnerability due to improper enforcement of a single, unique action, enabling a remote attack and with the exploit disclosed publicly (VDB-240949). The ...

5.3CVSS4.7AI score0.00583EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/09/30 3:00 p.m.•48 views

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.7AI score0.00583EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/09/30 3:00 p.m.•18 views

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS6.9AI score0.00583EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/09/30 12:00 a.m.•17 views

phpkobo Ajax Poll Script Competition Condition Issue Vulnerability

phpkobo Ajax Poll Script is a free Ajax script from phpkobo. A Competitive Conditions Issue vulnerability exists in phpkobo Ajax Poll Script version 3.18. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

5.3CVSS6.7AI score0.00583EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/30 12:00 a.m.•0 views

CVE-2023-5313: Improper Enforcement of a Single, Unique Action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.2AI score0.00583EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/09/30 12:00 a.m.•20 views

PT-2023-32033 · Unknown · Phpkobo Ajax Poll Script

Name of the Vulnerable Software and Affected Versions: phpkobo Ajax Poll Script version 3.18 Description: A problematic vulnerability was found in the phpkobo Ajax Poll Script, affecting an unknown functionality of the file ajax-poll.php of the component Poll Handler. This vulnerability leads to...

5.3CVSS6.9AI score0.00583EPSS
SaveExploits1References6
OSV
OSV
•added 2023/09/28 3:15 a.m.•15 views

CVE-2023-41447

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component...

6.1CVSS6.2AI score0.0066EPSS
SaveExploits1References3
OSV
OSV
•added 2023/09/28 3:15 a.m.•16 views

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

6.1CVSS6.1AI score0.0066EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/09/28 3:15 a.m.•10 views

CVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter...

8.8CVSS7.8AI score0.01236EPSS
SaveExploits1References4
Rows per page
Query Builder