Browse CVEs

HIGH 7.5 CVE-2020-11579EPSS 26% An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unau… Phpkb No fix yet Fix from $1,9502020-09-03 MEDIUM 6.5 CVE-2020-10501 CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted req… Phpkb No fix yet Fix from $1,6002020-03-12 MEDIUM 6.5 CVE-2020-10497 CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. Phpkb No fix yet Fix from $1,6002020-03-12 MEDIUM 6.5 CVE-2020-10498 CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request. Phpkb No fix yet Fix from $1,6002020-03-12 HIGH 8.8 CVE-2020-10478 CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code … Phpkb No fix yet Fix from $1,9502020-03-12 MEDIUM 6.5 CVE-2020-10458 Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver u… Phpkb No fix yet Fix from $1,6002020-03-12 MEDIUM 6.1 CVE-2020-10461 The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows a… Phpkb No fix yet Fix from $1,6002020-03-12 HIGH 7.2 CVE-2020-10389 admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any PO… Phpkb No fix yet Fix from $1,9502020-03-12 HIGH 7.2 CVE-2020-10390 OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows r… Phpkb No fix yet Fix from $1,9502020-03-12 MEDIUM 5.4 CVE-2020-10388 The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (inject… Phpkb No fix yet Fix from $1,6002020-03-12 HIGH 7.2 CVE-2020-10386EPSS 12% admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php fi… Phpkb No fix yet Fix from $1,9502020-03-12