rConfig SQL Injection Vulnerability (CNVD-2020-43137)

rConfig is an open source network configuration management utility . rConfig 3.9.5 version of the SQL injection vulnerability , a remote attacker can use the 'customLocation' parameter to send specially crafted SQL statements to the devices.crud.php script to exploit the vulnerability to view ,...