CVE-2020-10479: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this CSRF vulnerability?

The vulnerability ID for this CSRF vulnerability is CVE-2020-10479.

What is the severity of CVE-2020-10479?

The severity of CVE-2020-10479 is medium with a CVSS score of 4.3.

What software is affected by CVE-2020-10479?

Chadha PHPKB Standard Multi-Language 9.0 is affected by CVE-2020-10479.

How does CVE-2020-10479 allow attackers to exploit the vulnerability?

CVE-2020-10479 allows attackers to add a new news article via a crafted request.

Are there any references available for further information on CVE-2020-10479?

Yes, you can find references for further information on CVE-2020-10479 at the following links: [http://antoniocannito.it/?p=343#csrf2](http://antoniocannito.it/?p=343#csrf2) and [https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-news-article-cve-2020-10479](https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-news-article-cve-2020-10479).