Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-10385 State: PUBLISHED Published: 2020-03-11T04:07:16 Last Updated: 2024-08-04T10:58:40.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/10114 - https://wordpress.org/plugins/wpforms-lite/#developers - https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-wpforms-plugin/ - https://www.jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin/ - https://packetstormsecurity.com/files/156
s://www.jinsonvarghese.com/stored-xss-vulnerability-found-in-wpforms-plugin/ - https://packetstormsecurity.com/files/156910/WordPress-WP-Forms-1.5.8.2-Cross-Site-Scripting.html
CVE ID: CVE-2020-10386 State: PUBLISHED Published: 2020-03-12T13:00:25 Last Updated: 2024-08-04T10:58:40.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#rce1 - http://packetstormsecurity.com/files/156757/PHPKB-Multi-Language-9-image-upload.php-Code-Execution.html - https://www.exploit-db.com/exploits/48221 - https://antoniocannito.it/phpkb1#remote-code-execution-cve-2020-10386
CVE ID: CVE-2020-10387 State: PUBLISHED Published: 2020-03-12T13:03:41 Last Updated: 2024-08-04T10:58:40.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#afd - http://packetstormsecurity.com/files/156754/PHPKB-Multi-Language-9-Authenticated-Directory-Traversal.html - https://www.exploit-db.com/exploits/48220 - https://antoniocannito.it/phpkb1#authenticated-arbitrary-file-download-cve
- https://www.exploit-db.com/exploits/48220 - https://antoniocannito.it/phpkb1#authenticated-arbitrary-file-download-cve-2020-10387
CVE ID: CVE-2020-10388 State: PUBLISHED Published: 2020-03-12T13:03:43 Last Updated: 2024-08-04T10:58:40.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php (vulnerable file admin/include/functions-articles.php). Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#bxss1 - https://antoniocannito.it/phpkb1#blind-cross-site-scripting-cve-2020-10388
CVE ID: CVE-2020-10389 State: PUBLISHED Published: 2020-03-12T13:03:44 Last Updated: 2024-08-04T10:58:40.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#rce2 - http://packetstormsecurity.com/files/156751/PHPKB-Multi-Language-9-Authenticated-Remote-Code-Execution.html - https://antoniocannito.it/phpkb1#authenticated-remote-code-execution-cve-2020-10389 - https://www.exploit-db.com/exploits/4821
//antoniocannito.it/phpkb1#authenticated-remote-code-execution-cve-2020-10389 - https://www.exploit-db.com/exploits/48219
CVE ID: CVE-2020-10390 State: PUBLISHED Published: 2020-03-12T13:03:45 Last Updated: 2024-08-04T10:58:40.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by saving the code to be executed as the wkhtmltopdf path via admin/save-settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#rce3 - https://antoniocannito.it/phpkb1#out-of-band-blind-authenticated-remote-code-execution-cve-2020-10390
CVE ID: CVE-2020-10391 State: PUBLISHED Published: 2020-03-12T13:03:46 Last Updated: 2024-08-04T10:58:40.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-article.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10392 State: PUBLISHED Published: 2020-03-12T13:03:48 Last Updated: 2024-08-04T10:58:40.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-category.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10393 State: PUBLISHED Published: 2020-03-12T13:03:49 Last Updated: 2024-08-04T10:58:40.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-field.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10394 State: PUBLISHED Published: 2020-03-12T13:03:50 Last Updated: 2024-08-04T10:58:40.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-glossary.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10395 State: PUBLISHED Published: 2020-03-12T13:03:52 Last Updated: 2024-08-04T10:58:40.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-group.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10396 State: PUBLISHED Published: 2020-03-12T13:03:53 Last Updated: 2024-08-04T10:58:40.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-language.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10397 State: PUBLISHED Published: 2020-03-12T13:03:54 Last Updated: 2024-08-04T10:58:40.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-news.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10398 State: PUBLISHED Published: 2020-03-12T13:03:55 Last Updated: 2024-08-04T10:58:40.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-template.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10399 State: PUBLISHED Published: 2020-03-12T13:03:57 Last Updated: 2024-08-04T10:58:40.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-user.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10400 State: PUBLISHED Published: 2020-03-12T13:03:58 Last Updated: 2024-08-04T10:58:40.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/article-collaboration.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10401 State: PUBLISHED Published: 2020-03-12T13:03:59 Last Updated: 2024-08-04T10:58:40.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-article.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10402 State: PUBLISHED Published: 2020-03-12T13:04:01 Last Updated: 2024-08-04T10:58:40.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-category.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10403 State: PUBLISHED Published: 2020-03-12T13:04:02 Last Updated: 2024-08-04T10:58:40.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-comment.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10404 State: PUBLISHED Published: 2020-03-12T13:04:03 Last Updated: 2024-08-04T10:58:40.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-field.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10405 State: PUBLISHED Published: 2020-03-12T13:04:04 Last Updated: 2024-08-04T10:58:40.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-glossary.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10406 State: PUBLISHED Published: 2020-03-12T13:04:06 Last Updated: 2024-08-04T10:58:40.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-group.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10407 State: PUBLISHED Published: 2020-03-12T13:04:07 Last Updated: 2024-08-04T10:58:40.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-news.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10408 State: PUBLISHED Published: 2020-03-12T13:04:08 Last Updated: 2024-08-04T10:58:40.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-subscriber.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10409 State: PUBLISHED Published: 2020-03-12T13:04:09 Last Updated: 2024-08-04T10:58:40.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-template.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10410 State: PUBLISHED Published: 2020-03-12T13:04:11 Last Updated: 2024-08-04T10:58:40.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-user.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10411 State: PUBLISHED Published: 2020-03-12T13:04:12 Last Updated: 2024-08-04T10:58:40.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/email-harvester.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10412 State: PUBLISHED Published: 2020-03-12T13:04:13 Last Updated: 2024-08-04T10:58:40.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-csv.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10413 State: PUBLISHED Published: 2020-03-12T13:04:14 Last Updated: 2024-08-04T10:58:40.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-html.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10414 State: PUBLISHED Published: 2020-03-12T13:04:16 Last Updated: 2024-08-04T10:58:40.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index-attachments.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10415 State: PUBLISHED Published: 2020-03-12T13:04:17 Last Updated: 2024-08-04T10:58:40.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10416 State: PUBLISHED Published: 2020-03-12T13:04:18 Last Updated: 2024-08-04T10:58:40.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/kb-backup.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10417 State: PUBLISHED Published: 2020-03-12T13:04:19 Last Updated: 2024-08-04T10:58:40.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-articles.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10418 State: PUBLISHED Published: 2020-03-12T13:04:21 Last Updated: 2024-08-04T10:58:40.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-attachments.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10419 State: PUBLISHED Published: 2020-03-12T13:04:22 Last Updated: 2024-08-04T10:58:40.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-categories.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10420 State: PUBLISHED Published: 2020-03-12T13:04:23 Last Updated: 2024-08-04T10:58:40.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456
CVE ID: CVE-2020-10421 State: PUBLISHED Published: 2020-03-12T13:04:24 Last Updated: 2024-08-04T10:58:40.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-departments.php by adding a question mark (?) followed by the payload. Additional Analyst Notes: - CVE Program Container: References: - http://antoniocannito.it/?p=137#uxss - https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456