CVE-2020-10416

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/kb-backup.php by adding a question mark (?) followed by the payload.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:chadhaajay:phpkb:9.0:*:*:*:*:*:*:*

Information

Published : 2020-03-12 07:15

Updated : 2022-08-19 14:26


NVD link : CVE-2020-10416

Mitre link : CVE-2020-10416


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

chadhaajay

  • phpkb