CVE-2020-13873: SQL Injection
A SQL Injection vulnerability in gettopicinfo() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2020-13873.
What is the severity of CVE-2020-13873?
The severity of CVE-2020-13873 is critical, with a severity score of 9.8.
What is the affected software for CVE-2020-13873?
The affected software for CVE-2020-13873 is Codologic Codoforum version up to 4.9.
How can an attacker exploit CVE-2020-13873?
An attacker can exploit CVE-2020-13873 by bypassing the admin page using a leaked password-reset token of the admin and uploading a PHP shell to execute remote code.
Are there any references for CVE-2020-13873?
Yes, you can find references for CVE-2020-13873 at the following URLs: [http://codologic.com/forum/](http://codologic.com/forum/), [https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explained](https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explained), [https://community.sonarsource.com/c/announce/stories/23](https://community.sonarsource.com/c/announce/stories/23).