Sql injection

The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information...

Command injection

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped...

Design/Logic Flaw

The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request...

Sql injection

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php...

CVE-2020-23151

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped...

CVE-2020-23151

CVE-2020-23151 concerns rConfig 3.9.5, where a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php can trigger command injection because the path parameter is passed directly to exec without escaping. Multiple sources (Red Hat, NVD, CNNVD, PRION, OpenVAS, CVE list) corroborate this singl...

CVE-2020-23150

CVE-2020-23150 concerns rConfig 3.9.5. Concrete details in the connected docs show a SQL injection vulnerability in config.inc.php that can be exploited by sending a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php to access sensitive database information. Affected software: rCon...

CVE-2020-23150

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php...

CVE-2020-23149

The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information...

CVE-2020-23149

CVE-2020-23149 affects rConfig 3.9.5. The vulnerability arises from the dbName parameter in ajaxDbInstall.php being unsanitized, enabling SQL injection to access sensitive database information. Multiple connected records (NVD, CNVD, Red Hat, CNVD, PRION, OpenVAS, etc.) corroborate the same root c...

CVE-2020-23148

The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request...

CVE-2020-23148

CVE-2020-23148 affects rConfig 3.9.5 via a vulnerability in the LDAP login path. The issue is the unsanitized userLogin parameter in ldap/login.php , which can lead to a LDAP injection and potential exposure of sensitive information through a crafted POST request. Public references consistently d...

rConfig 操作系统命令注入漏洞

rConfig is an open source network configuration management utility program. An operating system command injection vulnerability exists in rConfig version 3.9.5, which stems from the rConfig path parameter being passed directly to the exec function without being escaped. The vulnerability can be...

rConfig SQL注入漏洞

rConfig is an open source network device configuration management utility. rConfig version 3.9.5 is vulnerable to a SQL injection vulnerability that stems from an unvalidated dbName parameter in ajaxDbInstall.php, which can be exploited by attackers to access sensitive database information...

rConfig SQL注入漏洞

rConfig is an open source network device configuration management utility. rConfig version 3.9.5 contains a SQL injection vulnerability in config.inc.php, which can be exploited by sending a specially crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php to access sensitive database...

rConfig 注入漏洞

rConfig is an open source network configuration management utility. A security vulnerability exists in rConfig that stems from the unfiltered userLogin parameter in ldap/login.php in version 3.9.5 of rConfig. An attacker can use this vulnerability to perform ldap injection and obtain sensitive...

PT-2021-10845 · Rconfig · Rconfig

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.5 Description: The issue allows command injection by sending a crafted GET request to "lib/ajaxHandlers/ajaxArchiveFiles.php" since the path parameter is passed directly to the exec function without being escaped...

File upload vulnerability in rConfig

rConfig is an open source network device configuration management utility . A file upload vulnerability exists in rConfig 3.9.6 and earlier versions. An attacker can exploit this vulnerability to gain control of the server...

Metasploit Wrap-Up

Cisco ‘Sploits This week’s Metasploit Framework release brings two modules that target Cisco products.The first module, written by our very own jheysel-r7, targets an unauthenticated file upload vulnerability in Cisco HyperFlex HX Data Platform. Vulnerable versions of the Cisco HyperFlex software...

rConfig <= 3.9.6 Shell Upload Exploit

This Metasploit module allows an attacker with a privileged rConfig account to start a reverse shell due to an arbitrary file upload vulnerability in /lib/crud/vendors.crud.php. This module requires Metasploit: https://metasploit.com/download Current source:...