CVE-2020-10488: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10488?

CVE-2020-10488 is a vulnerability that allows attackers to delete a news article in Chadha PHPKB Standard Multi-Language 9 via a crafted request.

How severe is CVE-2020-10488?

CVE-2020-10488 has a severity keyword of 'medium' and a severity value of 4.3.

What software is affected by CVE-2020-10488?

Chadha PHPKB Standard Multi-Language 9 is affected by CVE-2020-10488.

How can an attacker exploit CVE-2020-10488?

An attacker can exploit CVE-2020-10488 by sending a crafted request to admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9.

Are there any references for CVE-2020-10488?

Yes, you can find references for CVE-2020-10488 at the following links: http://antoniocannito.it/?p=343#csrf11, https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-news-article-cve-2020-10488.