rConfig SQL Injection Vulnerability (CNVD-2020-16098)

rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in the web interface of rConfig 3.94 and earlier versions. An attacker can exploit this vulnerability with a SQL injection attack via the commands.inc.php searchColumn parameter...

CVE-2020-10220

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

Sql injection

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...

CVE-2019-19207

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...