Lucene search
China National Vulnerability DatabaseCNVD-2021-61756HistoryAug 10, 2021 - 12:00 a.m.
rConfig SQL Injection Vulnerability (CNVD-2021-61756)
2021-08-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
0.004 Low
EPSS
Percentile
74.0%
rConfig is an open source network device configuration management utility. rConfig version 3.9.5 is vulnerable to a SQL injection vulnerability that stems from an unvalidated dbName parameter in ajaxDbInstall.php, which can be exploited by attackers to access sensitive database information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rconfig rconfig | eq | 3.9.5 |
Related
cvelist
cvelist
CVE-2020-23149
2021-08-09 22:54:13
cve
cve
CVE-2020-23149
2021-08-09 23:15:06
nvd
nvd
CVE-2020-23149
2021-08-09 23:15:06
prion
prion
Sql injection
2021-08-09 23:15:00
openvas
openvas
rConfig <= 3.9.6 Multiple Vulnerabilities
2021-08-23 00:00:00