Latest vulnerabilities for vendor "rconfig"

8.8

First published (updated )

CVE-2023-39108

rConfig rConfigSSRF

8.8

First published (updated )

CVE-2023-39110

rConfig rConfigSSRF

8.8

First published (updated )

CVE-2023-39109

rConfig rConfigSQL Injection

8.8

First published (updated )

CVE-2022-45030

rConfig rConfigAn arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive fi…

6.5

First published (updated )

CVE-2023-24366

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigMalicious File Upload

8.8

First published (updated )

CVE-2022-44384

rConfig rConfigInsecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache…

9

First published (updated )

CVE-2021-29005

rConfig rConfigPath Traversal

6.5

First published (updated )

CVE-2021-29006

rConfig rConfigSQL Injection

8.8

First published (updated )

CVE-2021-29004

rConfig rConfigAn arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allo…

7.8

First published (updated )

CVE-2020-27466

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigAn insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers…

7.8

First published (updated )

CVE-2020-27464

rConfig rConfigAn arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerabili…

9.1

First published (updated )

CVE-2020-25359

rConfig rConfigSSRF

6.5

First published (updated )

CVE-2020-25353

rConfig rConfigXSS

5.4

First published (updated )

CVE-2020-25352

rConfig rConfigAn information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6. This vuln…

6.5

First published (updated )

CVE-2020-25351

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigOS Command Injection, Command Injection

9.8

First published (updated )

CVE-2020-23151

rConfig rConfigSQL Injection

7.5

First published (updated )

CVE-2020-23150

rConfig rConfigSQL Injection

7.5

First published (updated )

CVE-2020-23149

rConfig rConfigThe userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to per…

7.5

First published (updated )

CVE-2020-23148

rConfig rConfiglib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to admi…

9.8

First published (updated )

CVE-2020-13638

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigOS Command Injection

9

First published (updated )

CVE-2020-13778

rConfig rConfigrConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, b…

9.9

First published (updated )

CVE-2020-15715

rConfig rConfigSQL Injection

8.8

First published (updated )

CVE-2020-15714

rConfig rConfigSQL Injection

8.8

First published (updated )

CVE-2020-15713

rConfig rConfigPath Traversal

4.3

First published (updated )

CVE-2020-15712

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigSQL Injection

9.8

First published (updated )

CVE-2020-10546

rConfig rConfigSQL Injection

9.8

First published (updated )

CVE-2020-10547

rConfig rConfigSQL Injection

9.8

First published (updated )

CVE-2020-10548

rConfig rConfigSQL Injection

9.8

First published (updated )

CVE-2020-10549

rConfig rConfigMalicious File Upload

8.8

First published (updated )

CVE-2020-12255

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigXSS

5.4

First published (updated )

CVE-2020-12256

rConfig rConfigCSRF

8.8

First published (updated )

CVE-2020-12257

rConfig rConfigrConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishand…

9.1

First published (updated )

CVE-2020-12258

rConfig rConfigXSS

5.4

First published (updated )

CVE-2020-12259

rConfig rConfigOS Command Injection, Command Injection

9.8

First published (updated )

CVE-2020-10879

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigAn issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated attacke…

7.5

First published (updated )

CVE-2020-9425

rConfig rConfigrConfig OS Command Injection Vulnerability

9

Exploited

First published (updated )

CVE-2020-10221

rConfig rConfigSQL Injection

9.8

First published (updated )

CVE-2020-10220

rConfig rConfigOS Command Injection

9

First published (updated )

CVE-2019-19509

rConfig rConfigAn issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconf…

7.8

First published (updated )

CVE-2019-19585

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

rConfig rConfigPath Traversal

7.5

First published (updated )

CVE-2019-19372

rConfig rConfigSQL Injection

8.8

First published (updated )

CVE-2019-19207

rConfig rConfigOS Command Injection

9

First published (updated )

CVE-2019-16663

rConfig rConfigOS Command Injection