CVE-2020-13873 - A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin

Back Back to CVE browser

CRITICAL

A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin

Published May 12, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 4.92%

Description

A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.)

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (7)

http://codologic.com/forum/
x_refsource_MISCVendor Advisory
https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explained
x_refsource_MISCExploitThird Party Advisory
https://community.sonarsource.com/c/announce/stories/23
x_refsource_MISCThird Party Advisory
https://community.sonarsource.com/t/codoforum-4-8-7-critical-code-vulnerabilities-explained/28297
x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6081
Advisory
https://github.com/SmashITs
x_refsource_MISCThird Party Advisory
https://twitter.com/sonarsource/status/1300818196090384384
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://codologic.com/forum/		x_refsource_MISCVendor Advisory
https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explained		x_refsource_MISCExploitThird Party Advisory
https://community.sonarsource.com/c/announce/stories/23		x_refsource_MISCThird Party Advisory
https://community.sonarsource.com/t/codoforum-4-8-7-critical-code-vulnerabilities-explained/28297		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6081		Advisory
https://github.com/SmashITs		x_refsource_MISCThird Party Advisory
https://twitter.com/sonarsource/status/1300818196090384384		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 12, 2021

Updated Aug 4, 2024

Reserved Jun 6, 2020

Link CVE-2020-13873

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-13873

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 12, 2021

Updated Aug 4, 2024

Link EUVD-2020-6081

GitHub

No data