CVE-2020-10497: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:06 PM

Data Sourced

via MITRE·01:06 PM

Description

Frequently Asked Questions

What is CVE-2020-10497?

CVE-2020-10497 refers to a CSRF vulnerability in the Chadha PHPKB Standard Multi-Language 9 software.

How does CVE-2020-10497 affect the Chadha PHPKB Standard Multi-Language 9 software?

CVE-2020-10497 allows attackers to delete a category in the Chadha PHPKB Standard Multi-Language 9 software through a crafted request.

How severe is CVE-2020-10497?

CVE-2020-10497 has a severity rating of 6.5, which is considered medium.

How can I fix CVE-2020-10497?

It is recommended to apply the latest security patches or updates provided by Chadhaajay Phpkb for the Chadha PHPKB Standard Multi-Language 9 software to fix CVE-2020-10497.

Where can I find more information about CVE-2020-10497?

More information about CVE-2020-10497 can be found at the following references: http://antoniocannito.it/?p=343#csrf20 and https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-deleting-a-category-cve-2020-10497