Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown

CVE-2023-41450

Disclosure Date: September 28, 2023 (last updated October 08, 2023)
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
Attacker Value
Unknown

CVE-2023-41447

Disclosure Date: September 28, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component.
Attacker Value
Unknown

CVE-2023-41446

Disclosure Date: September 28, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.
Attacker Value
Unknown

CVE-2023-41453

Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.
Attacker Value
Unknown

CVE-2023-41452

Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
Attacker Value
Unknown

CVE-2023-41451

Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
Attacker Value
Unknown

CVE-2023-41449

Disclosure Date: September 27, 2023 (last updated October 08, 2023)
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
Attacker Value
Unknown

CVE-2023-41448

Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.
Attacker Value
Unknown

CVE-2023-41445

Disclosure Date: September 27, 2023 (last updated October 08, 2023)
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.