ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

119 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: chadhaajay ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-11579
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition.

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.

NVD description · AI analysis pending		7.527% PoC ×2
  • chadhaajay phpkb
—
CVE-2020-10478
+48 in the same advisory: …10458 …10501 …10498 …10497 …10461 …10460 +42
CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution o

CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.

NVD description · AI analysis pending		8.8
group max
1% PoC ×2
  • chadhaajay phpkb
—