GCVE - cpe:2.3:a:phpkobo:ajaxnewsticker:1.0.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:phpkobo:ajaxnewsticker:1.0.5:*:*:*:*:*:*:*

part: a version: 1.0.5 update: *

Vendor	Phpkobo (`5a327fa7-4fe6-528c-a93d-55390a88949d`)
Product	Ajaxnewsticker (`2b8cbc82-fbb2-538d-aa21-7a29d96c9cba`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-41453`	vulnerable	2026-06-08 06:11:06.120922	Details available Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component. Published: 2023-09-27T00:00:00.000Z Updated: 2026-07-09T00:28:17.627Z Open on db.gcve.eu Reference links https://gist.github.com/RNPG/be2ca92cb1f943d4c340c75fbfc9b783	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41452`	vulnerable	2026-06-08 06:11:06.120417	Details available Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. Published: 2023-09-27T00:00:00.000Z Updated: 2026-07-09T00:28:16.389Z Open on db.gcve.eu Reference links https://gist.github.com/RNPG/32be1c4bae6f9378d4f382ba0c92b367	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41451`	vulnerable	2026-06-08 06:11:06.119850	Details available Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. Published: 2023-09-27T00:00:00.000Z Updated: 2026-07-09T00:28:15.157Z Open on db.gcve.eu Reference links https://gist.github.com/RNPG/062cfca2e293a0e7d24f5d55f8db3fde	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41450`	vulnerable	2026-06-08 06:11:06.119330	Details available An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Published: 2023-09-28T00:00:00.000Z Updated: 2026-07-09T00:28:13.935Z Open on db.gcve.eu Reference links https://gist.github.com/RNPG/e11af10e1bd3606de8b568033d932589	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41449`	vulnerable	2026-06-08 06:11:06.118892	Details available An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. Published: 2023-09-27T00:00:00.000Z Updated: 2026-07-09T00:28:12.701Z Open on db.gcve.eu Reference links https://gist.github.com/RNPG/c1ae240f2acec138132aa64ce3faa2e0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41448`	vulnerable	2026-06-08 06:11:06.118096	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41447`	vulnerable	2026-06-08 06:11:06.117404	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41446`	vulnerable	2026-06-08 06:11:06.116756	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41445`	vulnerable	2026-06-08 06:11:06.116137	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.