CVE-2020-10480: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this CSRF vulnerability?

The vulnerability ID for this CSRF vulnerability is CVE-2020-10480.

What is the affected software version?

The affected software version is Chadha PHPKB Standard Multi-Language 9.0.

What is the severity of CVE-2020-10480?

CVE-2020-10480 has a severity level of medium (4.3).

How can an attacker exploit the vulnerability?

An attacker can exploit the vulnerability by sending a crafted request to the admin/add-category.php endpoint.

Are there any references available for this vulnerability?

Yes, you can find references for this vulnerability at the following URLs: [http://antoniocannito.it/?p=343#csrf3](http://antoniocannito.it/?p=343#csrf3) and [https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-category-cve-2020-10480](https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-creating-a-category-cve-2020-10480).