CVE-2022-45030: SQL Injection
Published Apr 15, 2023
·Updated
A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).
Affected Software
1 affected component
rConfig rConfig=3.9.7
Event History
Apr 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this SQL injection vulnerability?
The vulnerability ID for this SQL injection vulnerability is CVE-2022-45030.
2
What is the affected software version?
The affected software version is rConfig 3.9.7.
3
How does this vulnerability occur?
This vulnerability occurs via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= in rConfig 3.9.7.
4
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 8.8.
5
Are there any known exploits or references for this vulnerability?
Yes, there are known exploits and references available at the following links: [Packetstorm Security](http://packetstormsecurity.com/files/171613/rconfig-3.9.7-SQL-Injection.html) and [rConfig Downloads](https://www.rconfig.com/downloads/rconfig-3.9.7.zip).