TI-2020-09281 CVE-2020-11579 · GHSA-cx9f-9g5f-369f
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition.
Priority MEDIUM 55
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition.
Chadhaajay
Records119All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Chadhaajay records in CISA KEVNo Chadhaajay vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
119 records in Phpkb · all components
TI-2020-08320 CVE-2020-10386 · GHSA-hw3v-qv8m-5jq6
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority MEDIUM 46
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.
TI-2020-08412 CVE-2020-10478 · GHSA-4gg3-r389-wf64
CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority MEDIUM 40
CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.
TI-2020-08324 CVE-2020-10390 · GHSA-98v9-rg9c-r4gg
OS Command Injection in export.php (vulnerable function called from…
Priority LOW 39
OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by saving the code to be exec…
TI-2020-08323 CVE-2020-10389 · GHSA-7wjc-6rvv-v2h4
admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers…
Priority LOW 39
admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings.
TI-2020-08321 CVE-2020-10387 · GHSA-86g4-3q94-q63v
Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 33
Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file.
TI-2020-08392 CVE-2020-10458 · GHSA-8mw9-mm87-g6vq
Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard…
Priority LOW 32
Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot-dot-slash sequence (../) via the GET parameter crdir, when t…
TI-2020-08435 CVE-2020-10501 · GHSA-6x22-353m-x472
CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 30
CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.
TI-2020-08432 CVE-2020-10498 · GHSA-vjcj-h7pj-5fx6
CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 30
CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request.
TI-2020-08431 CVE-2020-10497 · GHSA-qmm3-hr55-pf62
CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 30
CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.
TI-2020-08395 CVE-2020-10461 · GHSA-x2w9-m3q3-q2wc
The way comments in article.php (vulnerable function in include/functions-article.php)…
Priority LOW 29
The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script…
TI-2020-08394 CVE-2020-10460 · GHSA-x63r-x798-gv8p
admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard…
Priority LOW 25
admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data.
TI-2020-08322 CVE-2020-10388 · GHSA-4jpw-9jrj-w8pr
The way the Referer header in article.php is handled in Chadha PHPKB Standard…
Priority LOW 25
The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php (vulner…
TI-2020-08411 CVE-2020-10477 · GHSA-w2wx-39gg-37wf
Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 23
Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08410 CVE-2020-10476 · GHSA-6w2r-hcm5-p3q5
Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9…
Priority LOW 23
Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08409 CVE-2020-10475 · GHSA-cm7v-72vx-fx28
Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9…
Priority LOW 23
Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08408 CVE-2020-10474 · GHSA-xj39-fv8g-v8mp
Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9…
Priority LOW 23
Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08407 CVE-2020-10473 · GHSA-r7wq-wq63-mq97
Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9…
Priority LOW 23
Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08406 CVE-2020-10472 · GHSA-g749-j935-h755
Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9…
Priority LOW 23
Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08404 CVE-2020-10470 · GHSA-9m9x-37h6-qg84
Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 23
Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08403 CVE-2020-10469 · GHSA-7w9c-h3cr-35cw
Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9…
Priority LOW 23
Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
TI-2020-08402 CVE-2020-10468 · GHSA-38hp-3f6w-vm5w
Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 23
Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
TI-2020-08401 CVE-2020-10467 · GHSA-mmj4-93w9-45fr
Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 23
Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
TI-2020-08400 CVE-2020-10466 · GHSA-2vf5-wxw3-xq3g
Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 23
Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
TI-2020-08399 CVE-2020-10465 · GHSA-4687-jrh4-429g
Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows…
Priority LOW 23
Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.