Phpkb Security Vulnerabilities and Issues — Phpkb CVE List

Lucene search

ChadhaajayPhpkb

4 matches found

CVE•added 2020/09/03 6:15 p.m.•72 views

CVE-2020-11579

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled...

7.5CVSS7.4AI score0.15194EPSS

CVE•added 2020/03/12 2:15 p.m.•67 views

CVE-2020-10389

admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings.

7.2CVSS7.2AI score0.09039EPSS

Web

CVE•added 2020/03/12 1:15 p.m.•64 views

CVE-2020-10386

admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.

7.2CVSS7AI score0.18696EPSS

Web

CVE•added 2020/03/12 2:15 p.m.•40 views

CVE-2020-10390

OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by saving the code to be executed as the wkhtmltopdf path via admin/save-settings.php.

7.2CVSS7.4AI score0.047EPSS