Chadhaajay Phpkb
119 CVEs affecting Chadhaajay Phpkb. Latest disclosed: 2020-09-03. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10478 | High | 8.8 | 2020-03-12 | CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution… |
CVE-2020-11579 | High | 7.5 | 2020-09-03 | An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticate… |
CVE-2020-10390 | High | 7.2 | 2020-03-12 | OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote atta… |
CVE-2020-10389 | High | 7.2 | 2020-03-12 | admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST paramet… |
CVE-2020-10386 | High | 7.2 | 2020-03-12 | admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the… |
CVE-2020-10501 | Medium | 6.5 | 2020-03-12 | CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request. |
CVE-2020-10498 | Medium | 6.5 | 2020-03-12 | CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request. |
CVE-2020-10497 | Medium | 6.5 | 2020-03-12 | CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. |
CVE-2020-10458 | Medium | 6.5 | 2020-03-12 | Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot… |
CVE-2020-10461 | Medium | 6.1 | 2020-03-12 | The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers t… |
CVE-2020-10388 | Medium | 5.4 | 2020-03-12 | The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitr… |
CVE-2020-10460 | Medium | 4.9 | 2020-03-12 | admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV fi… |
CVE-2020-10387 | Medium | 4.9 | 2020-03-12 | Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash… |
CVE-2020-10477 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter… |
CVE-2020-10476 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parame… |
CVE-2020-10475 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET paramet… |
CVE-2020-10474 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parame… |
CVE-2020-10473 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET para… |
CVE-2020-10472 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET param… |
CVE-2020-10470 | Medium | 4.8 | 2020-03-12 | Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET paramete… |