Vulnerabilities > Phpkobo

DATE CVE VULNERABILITY TITLE RISK
2023-09-30 CVE-2023-5313 Race Condition vulnerability in PHPkobo Ajax Poll Script 3.18
A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18.
network
high complexity
phpkobo CWE-362
3.7
2023-09-28 CVE-2023-41446 Cross-site Scripting vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.
network
low complexity
phpkobo CWE-79
6.1
2023-09-28 CVE-2023-41447 Cross-site Scripting vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component.
network
low complexity
phpkobo CWE-79
6.1
2023-09-28 CVE-2023-41450 Code Injection vulnerability in PHPkobo Ajaxnewsticker 1.0.5
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
network
low complexity
phpkobo CWE-94
8.8
2023-09-27 CVE-2023-41445 Cross-site Scripting vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.
network
low complexity
phpkobo CWE-79
6.1
2023-09-27 CVE-2023-41448 Cross-site Scripting vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.
network
low complexity
phpkobo CWE-79
6.1
2023-09-27 CVE-2023-41449 Server-Side Request Forgery (SSRF) vulnerability in PHPkobo Ajaxnewsticker 1.0.5
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
network
low complexity
phpkobo CWE-918
critical
9.8
2023-09-27 CVE-2023-41451 Cross-site Scripting vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
network
low complexity
phpkobo CWE-79
6.1
2023-09-27 CVE-2023-41452 Cross-Site Request Forgery (CSRF) vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
network
low complexity
phpkobo CWE-352
8.8
2023-09-27 CVE-2023-41453 Cross-site Scripting vulnerability in PHPkobo Ajaxnewsticker 1.0.5
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.
network
low complexity
phpkobo CWE-79
6.1