CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings potentially gaining code execution or causing a denial of service via a crafted request.