CVE-2020-10460

admin/include/operations.php via admin/email-harvester.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data...

CVE-2020-10460

CVE-2020-10460 affects Chadha PHPKB Standard Multi-Language 9. The vulnerability exists in admin/include/operations.php (via admin/email-harvester.php), allowing injection of untrusted input into CSV files through the POST parameter data. This is described consistently across multiple sources (NV...