Vulnerabilities > Chadhaajay > Phpkb > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-03-12 CVE-2020-10450 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-traffic.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10449 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-search.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10448 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10447 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-failed-login.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10446 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-category.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10445 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10444 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-rated.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10443 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-printed.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10442 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-popular.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8
2020-03-12 CVE-2020-10441 Cross-site Scripting vulnerability in Chadhaajay PHPkb 9.0
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-monthly.php by adding a question mark (?) followed by the payload.
network
low complexity
chadhaajay CWE-79
4.8