deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-10442
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-popular.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10443
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-printed.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10444
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-rated.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10445
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10446
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-category.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10447
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-failed-login.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10448
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10449
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-search.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10450
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-traffic.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10451
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-user.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10452
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/save-article.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10453
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/search-users.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10454
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/sitemap-generator.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10455
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/translate.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10456
Published: 2020-03-12
Description: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark (?) followed by the payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#uxss; https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456; http://antoniocannito.it/?p=137#uxss
CVE: CVE-2020-10457
Published: 2020-03-12
Description: Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence (../) via the POST parameter imgName (for the new name) and imgUrl (for the current file to be renamed).
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: http://antoniocannito.it/?p=137#afr; https://antoniocannito.it/phpkb1#arbitrary-file-renaming-cve-2020-10457; http://antoniocannito.it/?p=137#afr
CVE: CVE-2020-10458
Published: 2020-03-12
Description: Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot-dot-slash sequence (../) via the GET parameter crdir, when the GET parameter action is set to df, causing a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://antoniocannito.it/?p=137#afld; https://antoniocannito.it/phpkb1#arbitrary-folder-deletion-cve-2020-10458; http://antoniocannito.it/?p=137#afld
CVE: CVE-2020-10459
Published: 2020-03-12
Description: Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that are stored on the webserver using a dot-dot-slash sequence (../) via the POST parameter inpCurrFolder.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: http://antoniocannito.it/?p=137#afl; https://antoniocannito.it/phpkb1#arbitrary-file-listing-cve-2020-10459; http://antoniocannito.it/?p=137#afl
CVE: CVE-2020-10460
Published: 2020-03-12
Description: admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1236
References: http://antoniocannito.it/?p=137#csvinj; https://antoniocannito.it/phpkb1#csv-injection-cve-2020-10460; http://antoniocannito.it/?p=137#csvinj
CVE: CVE-2020-10461
Published: 2020-03-12
Description: The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php, via the GET parameter cmt.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=137#bxss2; https://antoniocannito.it/phpkb1#blind-cross-site-scripting-2-cve-2020-10461; http://antoniocannito.it/?p=137#bxss2
CVE: CVE-2020-10462
Published: 2020-03-12
Description: Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss1; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-custom-field-cve-2020-10462; http://antoniocannito.it/?p=342#xss1
CVE: CVE-2020-10463
Published: 2020-03-12
Description: Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss2; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-template-cve-2020-10463; http://antoniocannito.it/?p=342#xss2
CVE: CVE-2020-10464
Published: 2020-03-12
Description: Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss3; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-an-article-cve-2020-10464; http://antoniocannito.it/?p=342#xss3
CVE: CVE-2020-10465
Published: 2020-03-12
Description: Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss4; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-category-cve-2020-10465; http://antoniocannito.it/?p=342#xss4
CVE: CVE-2020-10466
Published: 2020-03-12
Description: Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss5; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-glossary-term-cve-2020-10466; http://antoniocannito.it/?p=342#xss5
CVE: CVE-2020-10467
Published: 2020-03-12
Description: Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss6; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-comment-cve-2020-10467; http://antoniocannito.it/?p=342#xss6
CVE: CVE-2020-10468
Published: 2020-03-12
Description: Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss7; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-news-article-cve-2020-10468; http://antoniocannito.it/?p=342#xss7
CVE: CVE-2020-10469
Published: 2020-03-12
Description: Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss8; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-department-cve-2020-10469; http://antoniocannito.it/?p=342#xss8
CVE: CVE-2020-10470
Published: 2020-03-12
Description: Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss9; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-custom-fields-cve-2020-10470; http://antoniocannito.it/?p=342#xss9
CVE: CVE-2020-10471
Published: 2020-03-12
Description: Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss10; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-articles-cve-2020-10471; http://antoniocannito.it/?p=342#xss10
CVE: CVE-2020-10472
Published: 2020-03-12
Description: Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss11; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-templates-cve-2020-10472; http://antoniocannito.it/?p=342#xss11
CVE: CVE-2020-10473
Published: 2020-03-12
Description: Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss12; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-category-cve-2020-10473; http://antoniocannito.it/?p=342#xss12
CVE: CVE-2020-10474
Published: 2020-03-12
Description: Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss13; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-comment-cve-2020-10474; http://antoniocannito.it/?p=342#xss13
CVE: CVE-2020-10475
Published: 2020-03-12
Description: Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss14; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-deleting-a-ticket-cve-2020-10475; http://antoniocannito.it/?p=342#xss14
CVE: CVE-2020-10476
Published: 2020-03-12
Description: Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss15; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-glossary-term-2-cve-2020-10476; http://antoniocannito.it/?p=342#xss15
CVE: CVE-2020-10477
Published: 2020-03-12
Description: Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://antoniocannito.it/?p=342#xss16; https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-editing-a-news-article-cve-2020-10477; http://antoniocannito.it/?p=342#xss16
CVE: CVE-2020-10478
Published: 2020-03-12
Description: CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf1; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-changing-settings-cve-2020-10478; http://antoniocannito.it/?p=343#csrf1
CVE: CVE-2020-10479
Published: 2020-03-12
Description: CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf2; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-news-article-cve-2020-10479; http://antoniocannito.it/?p=343#csrf2
CVE: CVE-2020-10480
Published: 2020-03-12
Description: CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf3; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-category-cve-2020-10480; http://antoniocannito.it/?p=343#csrf3
CVE: CVE-2020-10481
Published: 2020-03-12
Description: CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf4; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-new-glossary-term-cve-2020-10481; http://antoniocannito.it/?p=343#csrf4
CVE: CVE-2020-10482
Published: 2020-03-12
Description: CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf5; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-new-article-template-cve-2020-10482; http://antoniocannito.it/?p=343#csrf5
CVE: CVE-2020-10483
Published: 2020-03-12
Description: CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf6; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-posting-a-comment-cve-2020-10483; http://antoniocannito.it/?p=343#csrf6
CVE: CVE-2020-10484
Published: 2020-03-12
Description: CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf7; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-new-custom-field-cve-2020-10484; http://antoniocannito.it/?p=343#csrf7
CVE: CVE-2020-10485
Published: 2020-03-12
Description: CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf8; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-an-article-cve-2020-10485; http://antoniocannito.it/?p=343#csrf8
CVE: CVE-2020-10486
Published: 2020-03-12
Description: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf9; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-comment-cve-2020-10486; http://antoniocannito.it/?p=343#csrf9
CVE: CVE-2020-10487
Published: 2020-03-12
Description: CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf10; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-glossary-term-cve-2020-10487; http://antoniocannito.it/?p=343#csrf10
CVE: CVE-2020-10488
Published: 2020-03-12
Description: CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf11; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-news-article-cve-2020-10488; http://antoniocannito.it/?p=343#csrf11
CVE: CVE-2020-10489
Published: 2020-03-12
Description: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf12; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-ticket-cve-2020-10489; http://antoniocannito.it/?p=343#csrf12
CVE: CVE-2020-10490
Published: 2020-03-12
Description: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf13; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-department-cve-2020-10490; http://antoniocannito.it/?p=343#csrf13
CVE: CVE-2020-10491
Published: 2020-03-12
Description: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://antoniocannito.it/?p=343#csrf14; https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-adding-a-department-cve-2020-10491; http://antoniocannito.it/?p=343#csrf14