CVE-2020-10387: Path Traversal
Published Mar 12, 2020
·Updated
Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file.
Affected Software
1 affected component
Chadhaajay Phpkb=9.0
Event History
Mar 12, 2020
CVE Published
via MITRE·01:03 PM
Data Sourced
via MITRE·01:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-10387?
CVE-2020-10387 is classified as a medium severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2020-10387?
To fix CVE-2020-10387, ensure proper input validation and sanitize file download requests to prevent path traversal attacks.
3
Which software versions are affected by CVE-2020-10387?
CVE-2020-10387 affects Chadha PHPKB Standard Multi-Language version 9.0.
4
What type of vulnerability is CVE-2020-10387?
CVE-2020-10387 is a path traversal vulnerability allowing attackers to access restricted directories.
5
Can CVE-2020-10387 be exploited remotely?
Yes, CVE-2020-10387 can be exploited remotely by sending specially crafted GET requests.