CVE-2020-19888

5.9 mediumEPSS 0.7%

Medium (5.9) in dbhcms project dbhcms. EPSS 0.7% chance of exploitation in the next 30 days.

DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table.

Severity

CVSS 3.1

5.9 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-08-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dbhcms_project:dbhcms

References

https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#13
https://github.com/fragrant10/cve/tree/master/dbhcms1.2.0#13

Check your stack JSON