EUVD-2020-18046

Malware in sbrugna...

CVE-2020-25359

The CVE-2020-25359 issue affects rConfig 3.9.5 and is fixed in 3.9.6. An attacker can delete arbitrary files by crafting a request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFiles.php, supplying a path in the path parameter and an extension in the ext parameter to delete all files with that extensi...