CVE-2020-13873

A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.)

• CWE-89

• http://codologic.com/forum/Vendor Advisory
• https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explainedExploit, Third Party Advisory
• https://community.sonarsource.com/c/announce/stories/23Third Party Advisory
• https://community.sonarsource.com/t/codoforum-4-8-7-critical-code-vulnerabilities-explained/28297Exploit, Third Party Advisory
• https://github.com/SmashITsThird Party Advisory
• https://twitter.com/sonarsource/status/1300818196090384384Exploit, Third Party Advisory
• http://codologic.com/forum/Vendor Advisory
• https://blog.sonarsource.com/codoforum-4.8.7-critical-code-vulnerabilities-explainedExploit, Third Party Advisory
• https://community.sonarsource.com/c/announce/stories/23Third Party Advisory
• https://community.sonarsource.com/t/codoforum-4-8-7-critical-code-vulnerabilities-explained/28297Exploit, Third Party Advisory
• https://github.com/SmashITsThird Party Advisory
• https://twitter.com/sonarsource/status/1300818196090384384Exploit, Third Party Advisory

Published

May 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13868An issue was discovered in the Comments plugin before 1.5.5 …6.5
• CVE-2020-13869An issue was discovered in the Comments plugin before 1.5.6 …5.4
• CVE-2020-1387An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2020-13870An issue was discovered in the Comments plugin before 1.5.5 …5.4
• CVE-2020-13871SQLite 3.32.2 has a use-after-free in resetAccumulator in se…7.5
• CVE-2020-13872Royal TS before 5 has a 0.0.0.0 listener, which makes it eas…8.8
• CVE-2020-13877SQL Injection issues in various ASPX pages of ResourceXpress…9.8
• CVE-2020-13878IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27e…9.8
• CVE-2020-13879IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+214…9.8
• CVE-2020-1388An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2020-13880IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cb…9.8
• CVE-2020-13881In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+…7.5