CVE-2019-16663

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution...

CVE-2019-16663

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution...

CVE-2019-16663: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to search.crud.php because the catCommand parameter is passed to the exec function without filtering, which can lead to command execution...

PT-2019-14749

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.2 Description An issue allows an attacker to directly execute system commands by sending a GET request to "search.crud.php" because the catCommand parameter is passed to the exec function without filtering, which can lead t...