CVE-2023-41448

CVE-2023-41448 concerns phpkobo AjaxNewTicker v1.0.5. The vulnerability lies in the index.php component, where the ID parameter can be crafted to trigger a cross-site scripting (XSS) flaw. This XSS could allow a remote attacker to execute arbitrary code (as stated in the sources) by supplying a m...

CVE-2023-41447

CVE-2023-41447 affects phpkobo AjaxNewTicker v1.0.5. It reports a Cross‑Site Scripting flaw that enables a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in index.php. The NVD entry lists a base score of 6.1 (Medium). Exploitation status is not provided in...

CVE-2023-41446

CVE-2023-41446 affects phpkobo AjaxNewTicker version 1.0.5. The vulnerability is a Cross Site Scripting flaw in the index.php component, exploitable via a crafted script in the title parameter to trigger arbitrary code execution. The NVD/CVE entry rates it as CVSS v3.1 Base Score 6.1 (Medium) wit...

CVE-2023-41450

PHPkobo AjaxNewsTicker v1.0.5 is affected. The vulnerability allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Root cause is improper handling of the reque parameter leading to code execution. The issue has high impact (C/H/I/A = HIGH) per CVSS 3.1. ...

CVE-2023-41453

CVE-2023-41453 concerns a Cross-Site Scripting vulnerability in phpkobo AjaxNewTicker v1.0.5. The issue arises from an exploitable vulnerability in the cmd parameter of the file index.php, enabling a remote attacker to supply a crafted payload that results in arbitrary code execution through XSS....

CVE-2023-41452

CVE-2023-41452: phpkobo AjaxNewTicker v1.0.5 contains a Cross-Site Request Forgery flaw allowing a remote attacker to execute arbitrary code through a crafted payload to the txt parameter in index.php. The vulnerability is reflected by the CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) wi...

CVE-2023-41449

CVE-2023-41449 affects phpkobo AjaxNewsTicker v1.0.5. Multiple connected sources confirm a remote code execution vulnerability via a crafted payload to the reque parameter, enabling arbitrary code execution. The issue stems from improper handling of the reque input in the application. Impact is d...

CVE-2023-41451

CVE-2023-41451 affects phpkobo AjaxNewTicker v1.0.5. The vulnerability is a Cross Site Scripting (XSS) in the index.php component, exploitable via a crafted payload to the txt parameter, which could allow an attacker to execute arbitrary code in the context of the victim’s browser. The NVD entry ...

CVE-2023-41445

CVE-2023-41445 affects the PHPKobo AjaxNewTicker product, version 1.0.5. The vulnerability is a Cross-Site Scripting (XSS) flaw in the index.php component that can be triggered by a crafted payload, enabling a remote attacker to execute arbitrary code within the context of the affected applicatio...