CVE-2020-10501: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:06 PM

Data Sourced

via MITRE·01:06 PM

Description

Frequently Asked Questions

What is the vulnerability ID of this CSRF vulnerability?

The vulnerability ID of this CSRF vulnerability is CVE-2020-10501.

What is the title of this CSRF vulnerability?

The title of this CSRF vulnerability is 'CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to e...'

What is the description of this CSRF vulnerability?

The description of this CSRF vulnerability is 'CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.'

What is the severity of this CSRF vulnerability?

The severity of this CSRF vulnerability is medium, with a severity value of 6.5.

How can attackers exploit this CSRF vulnerability?

Attackers can exploit this CSRF vulnerability by sending a crafted request to the admin/manage-departments.php file in Chadha PHPKB Standard Multi-Language 9, allowing them to edit a department given the id.