Show filters
119 Total Results
Displaying 111-119 of 119
Sort by:
Attacker Value
Unknown

CVE-2020-10463

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Attacker Value
Unknown

CVE-2020-10492

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request.
Attacker Value
Unknown

CVE-2020-10474

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
Attacker Value
Unknown

CVE-2020-10468

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
Attacker Value
Unknown

CVE-2020-10454

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/sitemap-generator.php by adding a question mark (?) followed by the payload.
Attacker Value
Unknown

CVE-2020-10444

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-rated.php by adding a question mark (?) followed by the payload.
Attacker Value
Unknown

CVE-2020-10430

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-subscribers.php by adding a question mark (?) followed by the payload.
Attacker Value
Unknown

CVE-2020-10417

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-articles.php by adding a question mark (?) followed by the payload.
Attacker Value
Unknown

CVE-2020-10386

Disclosure Date: March 12, 2020 (last updated February 21, 2025)
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.