返回 CVE 瀏覽器

CVE-2020-10221

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score52.2880%

EPSS Percentile96.82th

Published2020年3月8日

Last Modified2025年11月7日

Vulnerability Description

lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter.

Affected Platforms (CPE)

📦

Rconfig

Rconfig

<= 3.9.4

References & Advisories

🔗 http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html

🔗 https://cwe.mitre.org/data/definitions/78.html

🔗 https://engindemirbilek.github.io/rconfig-3.93-rce

🔗 https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html

🔗 http://packetstormsecurity.com/files/156687/rConfig-3.93-Authenticated-Remote-Code-Execution.html

🔗 https://cwe.mitre.org/data/definitions/78.html

🔗 https://engindemirbilek.github.io/rconfig-3.93-rce

🔗 https://github.com/EnginDemirbilek/EnginDemirbilek.github.io/blob/master/rconfig-3.93-rce.html

相關漏洞威脅

CVE-2020-157159.9

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the sear...

CVE-2020-108799.8

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parame...

CVE-2019-166629.8

An issue was discovered in rConfig 3.9.2. An attacker can directly execute system commands by sending a GET request to ajaxServerS...

CVE-2020-102209.8

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchCol...