CVE-2020-11579

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition

published September 3, 2020

CVSS

—

EPSS

27%

Percentile

98.0

In the wild

Unconfirmed

What it is

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.26919 · 98.0th percentile
Published: 2020-09-03T17:15Z

EPSS history

Timeline

03 SEP 17:15Z
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition
cvelistv5