← Back

Ajaxnewsticker

ajaxnewsticker

Vendor: Phpkobo • 9 CVEs

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 28, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 28, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd parameter in the index.php component.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 28, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 27, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 27, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 27, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 27, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 27, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component.
1Phpkobo
1Ajaxnewsticker
Nov 21, 2024
Sep 27, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component.