Описание
rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.
Ссылки
- Third Party AdvisoryVDB Entry
- Release NotesVendor Advisory
- Third Party AdvisoryVDB Entry
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:rconfig:rconfig:3.9.5:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02603
Низкий
9.9 Critical
CVSS3
6.5 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.
EPSS
Процентиль: 85%
0.02603
Низкий
9.9 Critical
CVSS3
6.5 Medium
CVSS2
Дефекты
NVD-CWE-noinfo