Lucene search

K

Ajaxnewsticker Security Vulnerabilities

cve
cve

CVE-2023-41445

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.

6.1CVSS

6.4AI Score

0.002EPSS

2023-09-27 11:15 PM
22
cve
cve

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.

6.1CVSS

6.4AI Score

0.002EPSS

2023-09-28 03:15 AM
31
cve
cve

CVE-2023-41447

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component.

6.1CVSS

6.4AI Score

0.002EPSS

2023-09-28 03:15 AM
30
cve
cve

CVE-2023-41448

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.

6.1CVSS

6.4AI Score

0.002EPSS

2023-09-27 11:15 PM
25
cve
cve

CVE-2023-41449

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.

9.8CVSS

9.4AI Score

0.004EPSS

2023-09-27 11:15 PM
29
cve
cve

CVE-2023-41450

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.

8.8CVSS

8.7AI Score

0.005EPSS

2023-09-28 03:15 AM
33
cve
cve

CVE-2023-41451

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.

6.1CVSS

6.4AI Score

0.002EPSS

2023-09-27 11:15 PM
29
cve
cve

CVE-2023-41452

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.

8.8CVSS

8.8AI Score

0.004EPSS

2023-09-27 11:15 PM
27
cve
cve

CVE-2023-41453

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.

6.1CVSS

6.4AI Score

0.002EPSS

2023-09-27 11:15 PM
27