rConfig - commands.inc.php SQLi Detection (CVE-2020-10220)

Detects CVE-2020-10220 by injecting UNION SELECT of a marker into commands.inc.php searchColumn and looking for id="" in the response. !/usr/bin/env python3 -- coding: utf-8 -- """rConfig commands.inc.php SQL injection CVE-2020-10220.""" from kittysploit import from lib.protocols.http.httpclient...

rConfig SQL Injection Vulnerability (CNVD-2020-16098)

rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in the web interface of rConfig 3.94 and earlier versions. An attacker can exploit this vulnerability with a SQL injection attack via the commands.inc.php searchColumn parameter...

CVE-2020-10220

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

Sql injection

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

CVE-2020-10220

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

CVE-2020-10220: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

PT-2020-1842

Name of the Vulnerable Software and Affected Versions rConfig versions 3.9.4 and earlier Description The issue is related to a lack of protection against SQL query structure exploitation in the commands.inc.php component of the rConfig utility for managing network device configurations. This can ...

CVE-2019-19207

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

CVE-2019-19207: Improper Neutralization of Special Elements used in an SQL Command

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...

PT-2019-15783

Name of the Vulnerable Software and Affected Versions rConfig version 3.9.2 Description The issue allows for SQL injection through the devices.php endpoint, specifically when the searchColumn parameter is manipulated. This can potentially lead to unauthorized access or modification of database...