CVE-2020-23150: SQL Injection
Published Aug 9, 2021
·Updated
A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php.
Affected Software
1 affected component
rConfig rConfig=3.9.5
Event History
Aug 9, 2021
CVE Published
via MITRE·10:54 PM
Data Sourced
via MITRE·10:54 PM
Description
Frequently Asked Questions
1
What is CVE-2020-23150?
CVE-2020-23150 is a SQL injection vulnerability in the config.inc.php file of rConfig 3.9.5.
2
How does CVE-2020-23150 impact rConfig?
CVE-2020-23150 allows attackers to access sensitive database information by exploiting a SQL injection vulnerability in rConfig 3.9.5.
3
What is the severity of CVE-2020-23150?
CVE-2020-23150 has a severity rating of 7.5 (High).
4
How can I fix CVE-2020-23150?
To fix CVE-2020-23150, it is recommended to update rConfig to version 3.9.6 or later, which includes a patch for this vulnerability.
5
Where can I find more information about CVE-2020-23150?
You can find more information about CVE-2020-23150 on the official GitHub page of rConfig.