CVE-2020-10387

Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash…

published March 12, 2020

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07844 · 94.7th percentile
Published
2020-03-12T13:03Z
EPSS history
Timeline
  • 12 MAR 13:03Z
    Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash…
    cvelistv5