CVE-2020-11579

An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.

• CWE-306

• https://github.com/ShielderSec/CVE-2020-11579Exploit, Third Party Advisory
• https://shielder.it/Third Party Advisory
• https://www.phpkb.comProduct
• https://www.shielder.it/blog/mysql-and-cve-2020-11579-exploitation/Exploit, Third Party Advisory
• https://github.com/ShielderSec/CVE-2020-11579Exploit, Third Party Advisory
• https://shielder.it/Third Party Advisory
• https://www.phpkb.comProduct
• https://www.shielder.it/blog/mysql-and-cve-2020-11579-exploitation/Exploit, Third Party Advisory

Published

Sep 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1156An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11560NCH Express Invoice 7.25 allows local users to discover the …7.8
• CVE-2020-11561In NCH Express Invoice 7.25, an authenticated low-privilege …8.8
• CVE-2020-11565An issue was discovered in the Linux kernel through 5.6.2. m…6
• CVE-2020-1157An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11576Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a use…5.3
• CVE-2020-1158An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11580An issue was discovered in Pulse Secure Pulse Connect Secure…9.1
• CVE-2020-11581An issue was discovered in Pulse Secure Pulse Connect Secure…8.1
• CVE-2020-11582An issue was discovered in Pulse Secure Pulse Connect Secure…8.8
• CVE-2020-11583A GET-based XSS reflected vulnerability in Plesk Obsidian 18…6.1
• CVE-2020-11584A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.1…6.1