|
211851
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10485
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211852
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10484
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211853
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10483
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211854
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10482
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211855
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10481
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211856
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10480
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211857
|
4.3 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.
|
CWE-352
Origin Validation Error
|
CVE-2020-10479
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211858
|
8.8 |
HIGH
Network
|
chadhaajay
|
phpkb
|
CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a cr…
|
CWE-352
Origin Validation Error
|
CVE-2020-10478
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211859
|
4.8 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
CWE-79
Cross-site Scripting
|
CVE-2020-10477
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211860
|
4.8 |
MEDIUM
Network
|
chadhaajay
|
phpkb
|
Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
CWE-79
Cross-site Scripting
|
CVE-2020-10476
|
2024-11-21 13:55 |
2020-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|