Show filters
120 Total Results
Displaying 21-30 of 120
Sort by:
Attacker Value
Unknown
CVE-2020-10456
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark (?) followed by the payload.
0
Attacker Value
Unknown
CVE-2020-10418
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-attachments.php by adding a question mark (?) followed by the payload.
0
Attacker Value
Unknown
CVE-2020-10472
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
0
Attacker Value
Unknown
CVE-2020-10469
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
0
Attacker Value
Unknown
CVE-2020-10473
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
0
Attacker Value
Unknown
CVE-2020-10490
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request.
0
Attacker Value
Unknown
CVE-2020-10461
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php, via the GET parameter cmt.
0
Attacker Value
Unknown
CVE-2020-10399
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-user.php by adding a question mark (?) followed by the payload.
0
Attacker Value
Unknown
CVE-2020-10387
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file.
0
Attacker Value
Unknown
CVE-2020-10412
Disclosure Date: March 12, 2020 (last updated February 21, 2025)
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-csv.php by adding a question mark (?) followed by the payload.
0
