CVE-2020-10490: CSRF
CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-10490?
CVE-2020-10490 is a vulnerability in Chadha PHPKB Standard Multi-Language 9 that allows attackers to delete a department via a crafted request.
How severe is CVE-2020-10490?
CVE-2020-10490 has a severity value of 4.3, which is considered medium.
How does CVE-2020-10490 work?
CVE-2020-10490 works by exploiting a cross-site request forgery vulnerability in the 'admin/manage-departments.php' file of Chadha PHPKB Standard Multi-Language 9, allowing attackers to send a crafted request to delete a department.
How can I fix CVE-2020-10490?
To fix CVE-2020-10490, it is recommended to update Chadha PHPKB Standard Multi-Language to a version that includes a patch or fix for the vulnerability.
Is there any additional information available for CVE-2020-10490?
Yes, you can find additional information about CVE-2020-10490 at the following references: [1] http://antoniocannito.it/?p=343#csrf13 [2] https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-department-cve-2020-10490