Vulnerabilities > Chadhaajay

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-10434 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-versions.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10433 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-users.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10432 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-tickets.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10431 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-templates.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10430 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-subscribers.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10429 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-settings.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10428 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-news.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10427 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-languages.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10426 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-groups.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10425 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-glossary.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8