CVE-2020-10457

Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a…

published March 12, 2020

CVSS
—
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence (../) via the POST parameter imgName (for the new name) and imgUrl (for the current file to be renamed).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01084 · 65.0th percentile
Published
2020-03-12T13:05Z
EPSS history
Timeline
  • 12 MAR 13:05Z
    Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a…
    cvelistv5