rConfig code issue vulnerability

rConfig is an open source network configuration management utility . rConfig 3.9.4 version of the vendor.crud.php file has a code problem vulnerability , the vulnerability stems from the file upload function is not properly validated , an attacker can upload a .php file containing arbitrary PHP...

rConfig Authorization Issues Vulnerability

rConfig is an open source network configuration management utility . An authorization issue vulnerability exists in rConfig version 3.9.4. An attacker could exploit this vulnerability to access other user sessions...

rConfig cross-site scripting vulnerability (CNVD-2020-33652)

rConfig is an open source network configuration management utility . A cross-site scripting vulnerability exists in the devicemgmnt.php file in version 3.9.4 of rConfig. The vulnerability stems from the lack of proper validation of client-side data in the WEB application, and can be exploited by ...

rConfig Cross-Site Request Forgery Vulnerability

rConfig is an open source network configuration management utility . A cross-site request forgery vulnerability exists in rConfig version 3.9.4, which stems from the program not properly validating user input. A remote attacker can exploit this vulnerability to perform malicious actions via...

rConfig <= 3.9.5 Multiple Vulnerabilities

rConfig is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-12255

rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to...

CVE-2020-12255

rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to...

CVE-2020-12256

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php...

CVE-2020-12256

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php...

Design/Logic Flaw

rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to...

Cross site scripting

rConfig 3.9.4 is vulnerable to reflected XSS. The devicemgmnt.php file improperly validates user input. An attacker can exploit this by crafting arbitrary JavaScript in the deviceId GET parameter to devicemgmnt.php...

CVE-2020-12257

rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...

CVE-2020-12258

rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Also, an attacker can exploit this vulnerability in conjunction with CVE-2020-12256 or CVE-2020-12259...

CVE-2020-12257

rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...

CVE-2020-12258

rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Also, an attacker can exploit this vulnerability in conjunction with CVE-2020-12256 or CVE-2020-12259...

Session fixation

rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. The application can reuse a session via PHPSESSID. Also, an attacker can exploit this vulnerability in conjunction with CVE-2020-12256 or CVE-2020-12259...

Cross site request forgery (csrf)

rConfig 3.9.4 is vulnerable to cross-site request forgery CSRF because it lacks implementation of CSRF protection such as a CSRF token. An attacker can leverage this vulnerability by creating a form add a user, delete a user, or edit a user...

CVE-2020-12255

rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a file upload by checking content-type without considering the file extension and header. Thus, an attacker can exploit this by uploading a .php file to...

CVE-2020-12255

CVE-2020-12255 affects rConfig 3.9.4 where vendor.crud.php handles file uploads by trusting content-type rather than file extension/header, allowing uploading a PHP file to vendor.php with manipulated content-type (e.g., image/gif) to achieve remote code execution. Multiple connected advisories c...

CVE-2020-12256

rConfig 3.9.4 is affected by CVE-2020-12256: a reflected XSS in the devicemgmnt.php, exploitable via the deviceId GET parameter to inject arbitrary JavaScript. The NUCLEI template confirms the flaw and notes an impact where authenticated attackers can inject code, potentially stealing session coo...