CVE-2022-44384

An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-44384

CVE-2022-44384 affects rconfig v3.9.6 and describes an arbitrary file upload vulnerability that allows an attacker to execute arbitrary PHP code by uploading a crafted file. The issue enables remote code execution via a crafted PHP file, with in‑the‑wild risk demonstrated by a Metasploit module t...

CVE-2022-44384

creationtimestamp| type| source ---|---|--- 2021-06-24 15:51:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/rconfigvendorsauthfileuploadrce.rb 2022-11-17 20:18:08+00:00| seen| https://t.me/cibsecurity/53083 2025-04-29 15:11:46+00:00|...