Phpkobo

8 CVEs across 7 Phpkobo products. Browse Phpkobo vulnerabilities, severities, and proof-of-concept exploits.

Phpkobo products with known CVEs

ProductCVEs
Ajaxnewsticker9
Address Book Script2
Free Real Estate Contact Form Script2
Short Url2
Adfreely1
Ajax Poll Script1
Ajax Poll Script1
Phpkobo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-5313Medium5.32023-09-30A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file aj…
CVE-2023-41450High8.82023-09-28An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
CVE-2023-41447Medium6.12023-09-28Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd para…
CVE-2023-41446Medium6.12023-09-28Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parame…
CVE-2023-41453Medium6.12023-09-27Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd paramet…
CVE-2023-41452High8.82023-09-27Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt p…
CVE-2023-41451Medium6.12023-09-27Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt paramet…
CVE-2023-41449Critical9.82023-09-27An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
CVE-2023-41448Medium6.12023-09-27Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID paramete…
CVE-2023-41445Medium6.12023-09-27Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php c…
CVE-2010-10632010-03-23Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allow remote attackers to includ…
CVE-2010-10622010-03-23Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allows remote…
CVE-2010-10612010-03-23Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitr…
CVE-2010-10602010-03-23Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote attackers to include…
CVE-2010-10592010-03-23Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers t…
CVE-2010-10582010-03-23Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers…
CVE-2010-10572010-03-23Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is disabled, allow remote attackers to inclu…