9 matches found
rConfig SQL Injection Vulnerability (CNVD-2020-16098)
rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in the web interface of rConfig 3.94 and earlier versions. An attacker can exploit this vulnerability with a SQL injection attack via the commands.inc.php searchColumn parameter...
CVE-2020-10220
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...
Sql injection
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...
CVE-2020-10220
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...
PT-2020-1842
Name of the Vulnerable Software and Affected Versions rConfig versions 3.9.4 and earlier Description The issue is related to a lack of protection against SQL query structure exploitation in the commands.inc.php component of the rConfig utility for managing network device configurations. This can ...
CVE-2020-10220: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter...
CVE-2019-19207
rConfig 3.9.2 allows devices.php?searchColumn= SQL injection...
PT-2019-15783
Name of the Vulnerable Software and Affected Versions rConfig version 3.9.2 Description The issue allows for SQL injection through the devices.php endpoint, specifically when the searchColumn parameter is manipulated. This can potentially lead to unauthorized access or modification of database...