CVE-2020-10489: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10489?

CVE-2020-10489 is a vulnerability in Chadha PHPKB Standard Multi-Language 9 that allows attackers to delete a ticket via a crafted request.

How severe is CVE-2020-10489?

CVE-2020-10489 has a severity level of medium.

How can an attacker exploit CVE-2020-10489?

An attacker can exploit CVE-2020-10489 by sending a specially crafted request to the admin/manage-tickets.php page in Chadha PHPKB Standard Multi-Language 9.

Is there a fix for CVE-2020-10489?

Yes, the fix for CVE-2020-10489 is available in the latest version of Chadha PHPKB Standard Multi-Language.

Where can I find more information about CVE-2020-10489?

You can find more information about CVE-2020-10489 at the following references: http://antoniocannito.it/?p=343#csrf12 and https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-ticket-cve-2020-10489