CVE-2020-10459

2020-03-1213:05:13

mitre

www.cve.org

3.7 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that are stored on the webserver using a dot-dot-slash sequence (…/) via the POST parameter inpCurrFolder.