Filtered by vendor Rconfig
Subscriptions
Total
44 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-19372 | 1 Rconfig | 1 Rconfig | 2024-05-17 | 7.5 High |
| A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files. NOTE: the discoverer later reported that there was not a "fully working exploit. | ||||
| CVE-2023-39108 | 1 Rconfig | 1 Rconfig | 2023-08-04 | 8.8 High |
| rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. | ||||
| CVE-2023-39109 | 1 Rconfig | 1 Rconfig | 2023-08-04 | 8.8 High |
| rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. | ||||
| CVE-2023-39110 | 1 Rconfig | 1 Rconfig | 2023-08-04 | 8.8 High |
| rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. | ||||
| CVE-2022-45030 | 1 Rconfig | 1 Rconfig | 2023-04-24 | 8.8 High |
| A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv). | ||||
| CVE-2023-24366 | 1 Rconfig | 1 Rconfig | 2023-04-03 | 6.5 Medium |
| An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request. | ||||
| CVE-2019-19585 | 1 Rconfig | 1 Rconfig | 2023-01-31 | 7.8 High |
| An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions. | ||||
| CVE-2019-19509 | 1 Rconfig | 1 Rconfig | 2023-01-31 | 8.8 High |
| An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path parameter is passed to the exec function without filtering, which can lead to command execution. | ||||
| CVE-2022-44384 | 1 Rconfig | 1 Rconfig | 2022-11-18 | 8.8 High |
| An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file. | ||||
| CVE-2020-23148 | 1 Rconfig | 1 Rconfig | 2022-10-26 | 7.5 High |
| The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request. | ||||
| CVE-2020-23151 | 1 Rconfig | 1 Rconfig | 2022-10-26 | 9.8 Critical |
| rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped. | ||||
| CVE-2020-10221 | 1 Rconfig | 1 Rconfig | 2022-10-07 | 8.8 High |
| lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. | ||||
| CVE-2020-25359 | 1 Rconfig | 1 Rconfig | 2022-10-05 | 9.1 Critical |
| An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability gave attackers the ability to send a crafted request to /lib/ajaxHandlers/ajaxDeleteAllLoggingFiles.php by specifying a path in the path parameter and an extension in the ext parameter and delete all the files with that extension in that path. | ||||
| CVE-2021-29006 | 1 Rconfig | 1 Rconfig | 2022-06-28 | 6.5 Medium |
| rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server. | ||||
| CVE-2020-13778 | 1 Rconfig | 1 Rconfig | 2022-06-15 | 8.8 High |
| rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php. | ||||
| CVE-2020-10549 | 1 Rconfig | 1 Rconfig | 2021-12-06 | 9.8 Critical |
| rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. | ||||
| CVE-2020-10548 | 1 Rconfig | 1 Rconfig | 2021-12-06 | 9.8 Critical |
| rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. | ||||
| CVE-2020-10547 | 1 Rconfig | 1 Rconfig | 2021-12-06 | 9.8 Critical |
| rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. | ||||
| CVE-2020-10546 | 1 Rconfig | 1 Rconfig | 2021-12-06 | 9.8 Critical |
| rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection. Because, by default, nodes' passwords are stored in cleartext, this vulnerability leads to lateral movement, granting an attacker access to monitored network devices. | ||||
| CVE-2021-29005 | 1 Rconfig | 1 Rconfig | 2021-10-18 | 8.8 High |
| Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server. | ||||