← back
CVE-2020-10386

CVE-2020-10386

EPSS 12.3%
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/156757/PHPKB-Multi-Language-9-image-upload.php-Code-Execution.htmlunverifiedcve_referencewww.exploit-db.com/exploits/48221unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://antoniocannito.it/?p=137#rce1http://packetstormsecurity.com/files/156757/PHPKB-Multi-Language-9-image-upload.php-Code-Execution.htmlhttps://antoniocannito.it/phpkb1#remote-code-execution-cve-2020-10386https://www.exploit-db.com/exploits/48221