Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Chadhaajay Subscribe
Total 119 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10469 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10468 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVE-2020-10466 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVE-2020-10470 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10467 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVE-2020-10474 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10473 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10472 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10475 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10478 1 Chadhaajay 1 Phpkb 2022-09-12 6.8 MEDIUM 8.8 HIGH
CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.
CVE-2020-10477 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10476 1 Chadhaajay 1 Phpkb 2022-09-12 3.5 LOW 4.8 MEDIUM
Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVE-2020-10481 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.
CVE-2020-10479 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.
CVE-2020-10482 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted request.
CVE-2020-10483 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request.
CVE-2020-10485 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.
CVE-2020-10484 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.
CVE-2020-10486 1 Chadhaajay 1 Phpkb 2022-09-12 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request.
CVE-2020-10487 1 Chadhaajay 1 Phpkb 2022-09-02 4.3 MEDIUM 4.3 MEDIUM
CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.