CVE-2020-10460

2020-03-1213:05:15

mitre

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.0%

JSON

admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data.

References

antoniocannito.it/?p=137#csvinj

antoniocannito.it/phpkb1#csv-injection-cve-2020-10460