CVE-2020-11579

7.5 highEPSS 27%

High (7.5) in chadhaajay phpkb. EPSS 27% chance of exploitation in the next 30 days.

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 27% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2020-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

chadhaajay:phpkb

References

https://github.com/ShielderSec/CVE-2020-11579
https://shielder.it/
https://www.phpkb.com
https://www.shielder.it/blog/mysql-and-cve-2020-11579-exploitation/
https://github.com/ShielderSec/CVE-2020-11579

Check your stack JSON