CVE-2019-19207

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

CVE-2019-19207

creationtimestamp| type| source ---|---|--- 2024-02-26 11:11:06+00:00| seen| https://t.me/ctinow/193244...

rConfig <= 3.9.2 Authenticated SQL Injection Vulnerability

rConfig is prone to an authenticated SQL injection vulnerability in devices.php?searchColumn=. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

CVE-2019-19207

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

CVE-2019-19207

CVE-2019-19207 affects rConfig 3.9.2, where an SQL injection is possible via devices.php?searchColumn=. The root cause is lack of input validation in the application that allows SQL statements to be injected. Impact is high across confidentiality, integrity, and availability (per CVSS 3.1: 8.8; p...