rConfig Remote Code Execution Vulnerability (CNVD-2020-60998)

rConfig is an open source network device configuration management utility . A remote code execution vulnerability exists in rConfig 3.9.4 and earlier versions. An attacker can exploit this vulnerability by sending a specially crafted GET request to lib/ajaxHandlers/ajaxAddTemplate.php or...