CVE-2020-11579

Exploit code for CVE-2020-11579, an arbitrary file disclosure through the MySQL client in PHPKB

CVE-2020-11579 Introduction PHPKB 90 Enterprise Edition (MySQL database) is affected by an unauthenticated arbitrary file disclosure via a malicious MySQL Server A remote attacker can read any file on a remote victim host with web-server privileges (eg www-data), via a single HTTP GET request Read more at shielderit/blog/mysql-and-cve-2020-11579-exploitation Note