rConfig Command Injection Vulnerability

rConfig is an open source network configuration management utility . A command injection vulnerability exists in rConfig versions prior to 3.9.5, which stems from the 'nodeId' parameter not being escaped and passed directly to the 'exec' function, which can be exploited to execute arbitrary...

CVE-2020-10879

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function without being escaped...