CVE-2020-10504: CSRF

Published Mar 12, 2020

Updated

CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:06 PM

Data Sourced

via MITRE·01:06 PM

Description

Frequently Asked Questions

What is CVE-2020-10504?

CVE-2020-10504 is a CSRF vulnerability in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9.

How does CVE-2020-10504 work?

CVE-2020-10504 allows attackers to edit a comment by sending a crafted request containing the comment's ID.

What is the severity of CVE-2020-10504?

CVE-2020-10504 has a severity rating of medium with a CVSS score of 4.3.

How can I fix CVE-2020-10504?

To fix CVE-2020-10504, update your Chadha PHPKB Standard Multi-Language installation to version 9.0 or later.

Where can I find more information about CVE-2020-10504?

You can find more information about CVE-2020-10504 at the following references: [http://antoniocannito.it/?p=343#csrf27](http://antoniocannito.it/?p=343#csrf27) and [https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-comment-cve-2020-10504](https://antoniocannito.it/phpkb3#cross-site-request-forgery-when-editing-a-comment-cve-2020-10504)