Lucene search
China National Vulnerability DatabaseCNVD-2021-61757HistoryAug 10, 2021 - 12:00 a.m.
rConfig SQL Injection Vulnerability (CNVD-2021-61757)
2021-08-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
rconfig
sql injection
vulnerability
config.inc.php
get request
sensitive database information
EPSS
0.003
Percentile
69.1%
rConfig is an open source network device configuration management utility. rConfig version 3.9.5 contains a SQL injection vulnerability in config.inc.php, which can be exploited by sending a specially crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php to access sensitive database information.
Related
cve
cve
CVE-2020-23150
2021-08-09 23:15:06
nvd
nvd
CVE-2020-23150
2021-08-09 23:15:06
cvelist
cvelist
CVE-2020-23150
2021-08-09 22:54:15
prion
prion
Sql injection
2021-08-09 23:15:00
openvas
openvas
rConfig <= 3.9.6 Multiple Vulnerabilities
2021-08-23 00:00:00