Lucene search

K
cvelistMitreCVELIST:CVE-2020-23149
HistoryAug 09, 2021 - 10:54 p.m.

CVE-2020-23149

2021-08-0922:54:13
mitre
www.cve.org

8.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information.

8.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

Related for CVELIST:CVE-2020-23149