Vulnerabilities > Chadhaajay

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-10424 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-fields.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10423 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-feedbacks.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10422 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-drafts.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10421 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-departments.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10420 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10419 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-categories.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10418 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-attachments.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10417 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-articles.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10416 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/kb-backup.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10415 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8