CVE-2020-10487: CSRF
CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this CSRF vulnerability?
The vulnerability ID for this CSRF vulnerability is CVE-2020-10487.
What is the severity of CVE-2020-10487?
The severity of CVE-2020-10487 is medium with a CVSS score of 4.3.
How does CSRF vulnerability in Chadha PHPKB Standard Multi-Language 9 affect the software?
The CSRF vulnerability in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.
How can an attacker exploit this vulnerability?
By sending a specially crafted request to the admin/manage-glossary.php page, an attacker can exploit this CSRF vulnerability.
Are there any references available for this vulnerability?
References for this vulnerability can be found at the following links: [http://antoniocannito.it/?p=343#csrf10](http://antoniocannito.it/?p=343#csrf10) and [https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-glossary-term-cve-2020-10487](https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-glossary-term-cve-2020-10487).