Lucene search
+L

8 matches found

NVD
NVD
•added 2020/03/12 2:15 p.m.•39 views

CVE-2020-10448

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-referrers.php by adding a question mark ? followed by the payload...

4.8CVSS5AI score0.00733EPSS
SaveExploits1References2
NVD
NVD
•added 2020/03/12 2:15 p.m.•46 views

CVE-2020-10388

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

5.4CVSS5.4AI score0.00602EPSS
SaveExploits1References2
Prion
Prion
•added 2020/03/12 2:15 p.m.•21 views

Cross site scripting

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-referrers.php by adding a question mark ? followed by the payload...

3.5CVSS4.9AI score0.00733EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2020/03/12 1:03 p.m.•73 views

CVE-2020-10388

Chadha PHPKB Standard Multi-Language v9 is affected by CVE-2020-10388 due to improper handling/validation of the Referer header in article.php, enabling Stored (Blind) XSS via admin/report-referrers.php (vulnerable code in admin/include/functions-articles.php). Affected component: PHPKB’s article...

5.4CVSS6.3AI score0.00602EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/03/12 1:03 p.m.•52 views

CVE-2020-10388

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/report-referrers.php vulnerable file admin/include/functions-articles.php...

5.4AI score0.00602EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•8 views

CVE-2020-10448: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-referrers.php by adding a question mark ? followed by the payload...

4.8CVSS5.7AI score0.00733EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/10 12:00 a.m.•9 views

CVE-2015-9472: Improper Neutralization of Input During Web Page Generation

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header...

6.1CVSS6.3AI score0.01318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/10 12:00 a.m.•9 views

PT-2019-7431

Name of the Vulnerable Software and Affected Versions incoming-links plugin versions prior to 0.9.10b for WordPress Description The issue allows for XSS via the Referer HTTP header in the referrers.php file. Recommendations For versions prior to 0.9.10b, update to version 0.9.10b or later to...

6.1CVSS0.01318EPSS
SaveExploits0References6
Rows per page
Query Builder