Vulnerabilities > Chadhaajay > Phpkb > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-10456 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10455 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/translate.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10454 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/sitemap-generator.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10453 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/search-users.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10452 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/save-article.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10451 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-user.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10450 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-traffic.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10449 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-search.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10448 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10447 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-failed-login.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8