CVE-2020-10494: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:06 PM

Data Sourced

via MITRE·01:06 PM

Description

Frequently Asked Questions

What is CVE-2020-10494?

CVE-2020-10494 is a CSRF vulnerability in Chadha PHPKB Standard Multi-Language 9, which allows attackers to edit a news article using a crafted request.

How severe is CVE-2020-10494?

CVE-2020-10494 has a severity score of 4.3, making it a medium severity vulnerability.

What is the affected software?

The affected software is Chadha PHPKB Standard Multi-Language 9.

How can attackers exploit CVE-2020-10494?

Attackers can exploit CVE-2020-10494 by sending a crafted request to the admin/edit-news.php endpoint in Chadha PHPKB Standard Multi-Language 9.

Are there any references for CVE-2020-10494?

Yes, you can find references for CVE-2020-10494 at http://antoniocannito.it/?p=343#csrf17 and https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-news-article-cve-2020-10494.