CVE-2020-10478

2020-03-1213:05:39

mitre

www.cve.org

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.8%

JSON

CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.

References

antoniocannito.it/?p=343#csrf1

antoniocannito.it/phpkb3#cross-site-request-forgery-when-changing-settings-cve-2020-10478