Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
chadhaajay vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv3
CVE-2020-10481
CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to add a new glossary term via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10486
CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to delete a comment via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10496
CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to edit an article, given the id, via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10500
CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to reply to any ticket, given the id, via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10502
CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to approve any comment, given the id, via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10484
CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to create a custom field via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10490
CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to delete a department via a crafted request.
Chadhaajay Phpkb 9.0
4.3
CVSSv3
CVE-2020-10494
CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows malicious users to edit a news article, given the id, via a crafted request.
Chadhaajay Phpkb 9.0
7.5
CVSSv3
CVE-2020-11579
An issue exists in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated malicious user to disclose local files on hosts running PHP prior to 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFIL...
Chadhaajay Phpkb 9.0
1 Github repository
4.9
CVSSv3
CVE-2020-10387
Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote malicious users to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file.
Chadhaajay Phpkb 9.0
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »