high8.8
CVE-2023-41452
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt p…
Impact
Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpkobo | Ajaxnewsticker | Version 1.0.5 |