PT-2020-12151 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to add a new glossary term via a crafted request to the admin/add-glossary.php endpoint. This is made possible by a CSRF weakness. Recommendations: For...

PT-2020-12144 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-comments.php" page. This enables attackers to perform a Reflected XSS...

PT-2020-12167 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete a category via a crafted request to the admin/manage-categories.php endpoint. This is made possible by a CSRF weakness. Recommendations: For Chad...

PT-2020-12161 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to add a department via a crafted request to the admin/manage-departments.php endpoint. This is made possible by a CSRF weakness. Recommendations: For Chad...

PT-2020-12152 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to add a new article template via a crafted request to the "admin/add-template.php" endpoint. This is made possible by a CSRF weakness. Recommendations: Fo...

PT-2020-12170 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to reply to any ticket, given the id, via a crafted request to the "admin/reply-ticket.php" endpoint. This is made possible by a CSRF weakness in the...

PT-2020-12058 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of the Referer header in article.php, allowing attackers to execute Stored Blind XSS by injecting arbitrary web script or HTML. This is specifically...

PT-2020-12125 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS in admin/translate.php. This can be achieved by adding a question mark ? followed by the...

PT-2020-12160 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete a department via a crafted request to the admin/manage-departments.php endpoint. This is made possible by a CSRF weakness. Recommendations: For...

PT-2020-12162 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to delete an article template via a crafted request to the admin/manage-templates.php endpoint. This is made possible by a CSRF weakness. Recommendations:...

PT-2020-12117 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

PT-2020-12073 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited by injecting arbitrary web script or HTML in...

cafemuseum.at Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1106433 Security Researcher MrRain1996 Helped patch 1039 vulnerabilities Received 5 Coordinated Disclosure badges Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting cafemuseum.at website an...

society.com.br Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1095456 Security Researcher haxmov Helped patch 543 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting society.com.br website and it...

PT-2020-18907 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: A specially crafted PNG file can cause an out-of-bounds write in the igcore19d.dll PNG pngread parser, resulting in remote code execution. An attacker needs to provide a malformed file to the...

estac.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1090981 Security Researcher raviakp1004 Helped patch 586 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting estac.fr website and its...

PT-2020-18908 · Accusoft · Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: The issue is related to an out-of-bounds write vulnerability in the igcore19d.dll JPEG jpegread precision parser. It can be triggered by a specially crafted JPEG file, potentially leading to remo...

PT-2020-18905 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.5.0 Description: An out-of-bounds write issue exists in the igcore19d.dll JPEG SOFx parser. A specially crafted JPEG file can cause this issue, resulting in remote code execution. An attacker needs to provide a...

climateaccess.org Cross Site Scripting vulnerability

Security Researcher MrRain1996 Helped patch 900 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting climateaccess.org website and its users. Following...

nih.dmsc.moph.go.th Open Redirect vulnerability

Open Bug Bounty ID: OBB-1085734 Security Researcher AndresERiveraB Helped patch 229 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting nih.dmsc.moph.go.th...