phpkobo AjaxNewTicker vulnerabilities
6 known CVE vulnerabilities in phpkobo AjaxNewTicker, translated and rated.
- CVE-2023-41447Medium
A Cross Site Scripting (XSS) vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload in the subcmd parameter of the index.php component.
- CVE-2023-41453Medium
A Cross Site Scripting (XSS) vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary JavaScript code via a crafted payload in the 'cmd' parameter of the index.php component.
- CVE-2023-41452High
A CSRF vulnerability in phpkobo AjaxNewTicker version 1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload in the txt parameter of the index.php component.
- CVE-2023-41451Medium
A Cross Site Scripting (XSS) vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary JavaScript code via a crafted payload in the 'txt' parameter of the index.php component.
- CVE-2023-41448Medium
A Cross Site Scripting (XSS) vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary JavaScript code via a crafted payload to the ID parameter in the index.php component.
- CVE-2023-41445Medium
A Cross Site Scripting (XSS) vulnerability in phpkobo AjaxNewTicker version 1.0.5 allows a remote attacker to execute arbitrary JavaScript code via a crafted payload in the index.php component.