CVE-2020-10387

概要

参考情報

• antoniocannito.it · Exploit
• packetstormsecurity.com/files/156754/PHPKB-Multi-Language-9-Authenticated-Directory-Traversal.html · Third Party Advisory
• antoniocannito.it/phpkb1 · Exploit
• exploit-db.com/exploits/48220 · Third Party Advisory

phpkb のその他の脆弱性

• CVE-2020-11579高 7.5An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a re…
• CVE-2020-10504中 4.3CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted re…
• CVE-2020-10503中 4.3CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a …
• CVE-2020-10502中 4.3CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a cra…
• CVE-2020-10501中 6.5CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a cr…