CVE-2023-41449
Critical · CVSS 9.8phpkobo AjaxNewsTicker — Server-Side Request Forgery (SSRF) leading to arbitrary code execution via crafted payload
- CVSS
- 9.8
- nvd
- EPSS
- 1.51%
- 71th pct
- KEV
- No
- Class
- other
- CWE-918
Description
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
Search profile — drives PoC discovery
Symbols requeAjaxNewsTickerajaxnewstickerphpkobo
Keywords CVE-2023-41449phpkoboAjaxNewsTickerSSRFreque parameterCWE-918ajaxnewsticker exploitphpkobo PoC
Versions: 1.0.5
Ranked PoCs (3) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0RNPG/CVEs needs reviewtrickest
- ★ 0fkie-cad/nvd-json-data-feeds needs reviewtrickest
- ★ 0gh_search
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z