CVE-2020-10407

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-news.php by adding a question mark (?) followed by the payload.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:chadhaajay:phpkb:9.0:*:*:*:*:*:*:*

Information

Published : 2020-03-12 07:15

Updated : 2022-08-19 14:24


NVD link : CVE-2020-10407

Mitre link : CVE-2020-10407


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

chadhaajay

  • phpkb