chadhaajay phpkb

Name: chadhaajay phpkb
Brand: chadhaajay

productUS

cpe:2.3:a:chadhaajay:phpkb:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high112medium2low

updated 2026-10-28

vulnerabilities (119)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11579US	high7.5OT high	26.9% (98th)	Exploit	no fix	2020-09-03	= 9.0
CVE-2020-10386US	high7.2	12.3% (96th)	Exploit	no fix	2020-03-12	= 9.0
CVE-2020-10387US	medium4.9	7.84% (95th)	Exploit	no fix	2020-03-12	= 9.0
CVE-2020-10389US	high7.2	4.88% (92nd)	—	no fix	2020-03-12	= 9.0
CVE-2020-10390US	high7.2	4.33% (91st)	—	no fix	2020-03-12	= 9.0
CVE-2020-10458US	medium6.5	1.54% (75th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10478US	high8.8	1.17% (67th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10457US	low2.7	1.08% (65th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10460US	medium4.9	1.08% (65th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10459US	low2.7	0.97% (62nd)	—	no fix	2020-03-12	= 9.0
CVE-2020-10461US	medium6.1	0.74% (55th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10456US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10455US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10454US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10453US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10452US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10451US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10450US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10449US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10448US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10398US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10391US	medium4.8	0.73% (54th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10477US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10476US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10475US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10474US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10473US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10472US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10470US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10469US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10468US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10467US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10466US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10465US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10464US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10463US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10462US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10447US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10446US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10445US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10444US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10443US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10442US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10441US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10440US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10439US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10438US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10437US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10436US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0
CVE-2020-10435US	medium4.8	0.61% (49th)	—	no fix	2020-03-12	= 9.0

showing 50 of 119

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')83 CVEs
CWE-352Cross-Site Request Forgery (CSRF)27 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-1236Improper Neutralization of Formula Elements in a CSV File1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE119 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan