phpkb vulnerabilities and fixes

Recent CVEs affecting phpkb, with upgrade or downgrade steps. 120 tracked.

phpkb has 120 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-03. Highest priority: CVE-2020-11579 (score 61/100).

• CVE-2020-11579 HIGH 7.5 DOWNGRADE An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition
• CVE-2020-10504 MEDIUM 4.3 DOWNGRADE CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment,
• CVE-2020-10503 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any
• CVE-2020-10502 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any co
• CVE-2020-10501 MEDIUM 6.5 DOWNGRADE CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a depa
• CVE-2020-10500 MEDIUM 4.3 DOWNGRADE CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any tick
• CVE-2020-10499 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticke
• CVE-2020-10498 MEDIUM 6.5 DOWNGRADE CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category,
• CVE-2020-10497 MEDIUM 6.5 DOWNGRADE CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a cat
• CVE-2020-10496 MEDIUM 4.3 DOWNGRADE CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article,
• CVE-2020-10495 MEDIUM 4.3 DOWNGRADE CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article
• CVE-2020-10494 MEDIUM 4.3 DOWNGRADE CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article,
• CVE-2020-10493 MEDIUM 4.3 DOWNGRADE CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary
• CVE-2020-10492 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an art
• CVE-2020-10491 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a depar
• CVE-2020-10490 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a de
• CVE-2020-10489 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket
• CVE-2020-10488 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news arti
• CVE-2020-10487 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a gloss
• CVE-2020-10486 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comme
• CVE-2020-10485 MEDIUM 4.3 DOWNGRADE CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an arti
• CVE-2020-10484 MEDIUM 4.3 DOWNGRADE CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom fiel
• CVE-2020-10483 MEDIUM 4.3 DOWNGRADE CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any
• CVE-2020-10482 MEDIUM 4.3 DOWNGRADE CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article
• CVE-2020-10481 MEDIUM 4.3 DOWNGRADE CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossar
• CVE-2020-10480 MEDIUM 4.3 DOWNGRADE CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new categor
• CVE-2020-10479 MEDIUM 4.3 DOWNGRADE CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news articl
• CVE-2020-10478 HIGH 8.8 DOWNGRADE CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the glo
• CVE-2020-10477 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject ar
• CVE-2020-10476 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injec
• CVE-2020-10475 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject
• CVE-2020-10474 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injec
• CVE-2020-10473 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inj
• CVE-2020-10472 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inje
• CVE-2020-10471 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injec
• CVE-2020-10470 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject
• CVE-2020-10469 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to in
• CVE-2020-10468 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbi
• CVE-2020-10467 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject a
• CVE-2020-10466 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject
• CVE-2020-10465 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject
• CVE-2020-10464 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject a
• CVE-2020-10463 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject
• CVE-2020-10462 MEDIUM 4.8 DOWNGRADE Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arb
• CVE-2020-10461 MEDIUM 6.1 DOWNGRADE The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha P
• CVE-2020-10460 MEDIUM 4.9 DOWNGRADE admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows
• CVE-2020-10459 LOW 2.7 DOWNGRADE Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functio
• CVE-2020-10458 MEDIUM 6.5 DOWNGRADE Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers
• CVE-2020-10457 LOW 2.7 DOWNGRADE Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attack
• CVE-2020-10456 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10455 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10454 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10453 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10452 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10451 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10450 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10449 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10448 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10447 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10446 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10445 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10444 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10443 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10442 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10441 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10440 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10439 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10438 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10437 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10436 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10435 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10434 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10433 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10432 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10431 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10430 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10429 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10428 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10427 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10426 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10425 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10424 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10423 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10422 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10421 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10420 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10419 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10418 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10417 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10416 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10415 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10414 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10413 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10412 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10411 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10410 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10409 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10408 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10407 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10406 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10405 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10404 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10403 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10402 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10401 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10400 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10399 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10398 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10397 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10396 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10395 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10394 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10393 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10392 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10391 MEDIUM 4.8 DOWNGRADE The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (i
• CVE-2020-10390 HIGH 7.2 DOWNGRADE OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha P
• CVE-2020-10389 HIGH 7.2 DOWNGRADE admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Exec
• CVE-2020-10388 MEDIUM 5.4 DOWNGRADE The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attacker
• CVE-2020-10387 MEDIUM 4.9 DOWNGRADE Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to down
• CVE-2020-10386 HIGH 7.2 DOWNGRADE admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achiev

FAQ

How do I fix phpkb vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is phpkb being exploited right now?

None of the tracked phpkb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which phpkb CVE should I patch first?

CVE-2020-11579 currently ranks highest (61/100): An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition.

RSS feed for phpkb · ← Back to latest CVEs