CVE-2020-10459

Path Traversal in admin/assetmanager/assetmanager.php vulnerable function saved in admin/assetmanager/functions.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that are stored on the webserver using a dot-dot-slash sequence ../ via the POST parameter inpCurrFolder...

CVE-2020-10459

Summary of CVE-2020-10459 : A path traversal flaw in Chadha PHPKB Standard Multi-Language 9 affects the admin/assetmanager/assetmanager.php component (vulnerable function saved in admin/assetmanager/functions.php). An attacker can abuse the POST parameter inpCurrFolder, using a dot-dot-slash sequ...