Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2020-10499
chadhaajay phpkb
CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request.
|
4.3 Medium | — | 0,48% | 12 Mar 2020 |
|
CVE-2020-10471
chadhasoftware phpkb
Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10472
chadhaajay phpkb
Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10473
chadhaajay phpkb
Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10474
chadhaajay phpkb
Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10475
chadhaajay phpkb
Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10476
chadhaajay phpkb
Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10477
chadhaajay phpkb
Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10478
chadhaajay phpkb
CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing...
|
8.8 High | — | 1,2% | 12 Mar 2020 |
|
CVE-2020-10479
chadhaajay phpkb
CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.
|
4.3 Medium | — | 0,48% | 12 Mar 2020 |
|
CVE-2020-10480
chadhaajay phpkb
CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.
|
4.3 Medium | — | 0,58% | 12 Mar 2020 |
|
CVE-2020-10481
chadhaajay phpkb
CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.
|
4.3 Medium | — | 0,48% | 12 Mar 2020 |
|
CVE-2020-10482
chadhaajay phpkb
CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted request.
|
4.3 Medium | — | 0,48% | 12 Mar 2020 |
|
CVE-2020-10483
chadhaajay phpkb
CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request.
|
4.3 Medium | — | 0,48% | 12 Mar 2020 |
|
CVE-2020-10484
chadhaajay phpkb
CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.
|
4.3 Medium | — | 0,48% | 12 Mar 2020 |
|
CVE-2020-10456
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.ph...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10457
chadhaajay phpkb
Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slas...
|
2.7 Low | — | 1,1% | 12 Mar 2020 |
|
CVE-2020-10458
chadhaajay phpkb
Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot-dot-slash...
|
6.5 Medium | — | 1,5% | 12 Mar 2020 |
|
CVE-2020-10459
chadhaajay phpkb
Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standard Multi-Language 9 allows att...
|
2.7 Low | — | 0,97% | 12 Mar 2020 |
|
CVE-2020-10460
chadhaajay phpkb
admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the...
|
4.9 Medium | — | 1,1% | 12 Mar 2020 |
|
CVE-2020-10461
chadhaajay phpkb
The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute S...
|
6.1 Medium | — | 0,74% | 12 Mar 2020 |
|
CVE-2020-10462
chadhaajay phpkb
Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10463
chadhaajay phpkb
Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10464
chadhaajay phpkb
Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10465
chadhaajay phpkb
Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10466
chadhaajay phpkb
Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10467
chadhaajay phpkb
Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10468
chadhaajay phpkb
Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10469
chadhaajay phpkb
Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10470
chadhaajay phpkb
Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10444
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10445
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10446
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-categ...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10447
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-faile...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10448
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-refer...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10449
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-searc...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10450
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-traff...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10451
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-user....
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10452
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/save-article...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10453
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/search-users...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10454
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/sitemap-gene...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10455
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/translate.ph...
|
4.8 Medium | — | 0,73% | 12 Mar 2020 |
|
CVE-2020-10431
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-templ...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10432
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-ticke...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10433
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-users...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10434
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-versi...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10435
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/my-languages...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10436
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/my-profile.p...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10437
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/optimize-dat...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |
|
CVE-2020-10438
chadhaajay phpkb
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/reply-ticket...
|
4.8 Medium | — | 0,61% | 12 Mar 2020 |