An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.

Published Sep 27, 2023 · Updated Jul 9, 2026 · Assigned by mitre