TI-2023-04886 CVE-2023-5313 · GHSA-xqh3-fr5h-w8cj
phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action
Priority MEDIUM 63
A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18.
Vulnerabilities
17 records
TI-2023-21986 CVE-2023-41450 · GHSA-45xg-5pv3-xx9x
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary…
Priority HIGH 73
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
TI-2023-21983 CVE-2023-41447 · GHSA-72w8-46g5-g9gm
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority MEDIUM 60
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component.
TI-2023-21982 CVE-2023-41446 · GHSA-grfr-9wgw-28v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority MEDIUM 60
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.
TI-2023-21989 CVE-2023-41453 · GHSA-gmw2-m49c-g8vj
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority MEDIUM 60
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.
TI-2023-21988 CVE-2023-41452 · GHSA-4f8p-h8vg-88vj
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority HIGH 73
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
TI-2023-21987 CVE-2023-41451 · GHSA-6p2m-36pr-g6qr
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority MEDIUM 60
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
TI-2023-21985 CVE-2023-41449 · GHSA-xmmp-7836-3m8w
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary…
Priority HIGH 82
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
TI-2023-21984 CVE-2023-41448 · GHSA-83qx-7q6j-787q
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority MEDIUM 60
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.
TI-2023-21981 CVE-2023-41445 · GHSA-8cx5-qpw9-rxrf
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote…
Priority MEDIUM 60
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.
TI-2010-01022 CVE-2010-1063 · GHSA-mg83-2m6f-g7p3
Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form…
Priority LOW 33
Multiple directory traversal vulnerabilities in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal s…
TI-2010-01021 CVE-2010-1062 · GHSA-744p-4q5v-6756
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real…
Priority LOW 34
Directory traversal vulnerability in codelib/sys/common.inc.php in Phpkobo Free Real Estate Contact Form 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a…
TI-2010-01020 CVE-2010-1061 · GHSA-6j8c-92pr-49vp
Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when…
Priority LOW 33
Multiple directory traversal vulnerabilities in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the LANG…
TI-2010-01019 CVE-2010-1060 · GHSA-mj7w-3346-7v97
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01…
Priority LOW 34
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..
TI-2010-01018 CVE-2010-1059 · GHSA-2fc2-f8gj-8hm5
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book…
Priority LOW 33
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory tra…
TI-2010-01017 CVE-2010-1058 · GHSA-5fxm-h2cx-72rc
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book…
Priority LOW 34
Directory traversal vulnerability in codelib/cfg/common.inc.php in Phpkobo Address Book Script 1.09, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a ..
TI-2010-01016 CVE-2010-1057 · GHSA-9g72-7ff3-wfq3
Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script)…
Priority LOW 35
Multiple directory traversal vulnerabilities in Phpkobo AdFreely (aka Ad Board Script) 1.01, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a ..// (dot dot slas…