CVE-2020-10386: Malicious File Upload
Published Mar 12, 2020
·Updated
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.
Affected Software
1 affected component
Chadhaajay Phpkb=9.0
Event History
Mar 12, 2020
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10386?
CVE-2020-10386 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2020-10386?
To fix CVE-2020-10386, ensure that file uploads are properly validated and only allow specific file types to be uploaded.
3
What kind of attack does CVE-2020-10386 enable?
CVE-2020-10386 enables attackers to upload a malicious .php file, leading to remote code execution.
4
Which version of PHPKB is affected by CVE-2020-10386?
CVE-2020-10386 affects Chadha PHPKB Standard Multi-Language version 9.0.
5
How can I prevent CVE-2020-10386 in my application?
Prevent CVE-2020-10386 by implementing strict upload file type validation and securing your file upload mechanisms.