rConfig OS Command Injection Vulnerability

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script

rConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function…

lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation

rConfig 3.9.4 and previous versions has unauthenticated snippets.inc.php SQL injection

rConfig 3.9.4 and previous versions has unauthenticated devices.inc.php SQL injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicyelements.inc.php SQL injection

rConfig 3.9.4 and previous versions has unauthenticated compliancepolicies.inc.php SQL injection

rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is passed directly to the exec function…

An issue was discovered in rConfig through 3.9.4

An issue was discovered in rConfig 3.9.2

An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6

rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php

A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv)

An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file

Insecure permission of chmod command on rConfig server 3.9.6 exists

rConfig 3.9.6 is affected by SQL Injection

rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or…

rConfig 3.9.5 is vulnerable to SQL injection

rConfig 3.9.5 is vulnerable to SQL injection

rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality

rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token

An issue was discovered in rConfig 3.9.3

rConfig 3.9.2 allows devices.php?searchColumn= SQL injection

An issue was discovered in rConfig 3.9.2

An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file

An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file

An issue was discovered in rConfig 3.9.3

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to…

The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information

The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST…

An issue was discovered in includes/head.inc.php in rConfig before 3.9.4

A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially download files

rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig < 8.2.13 Path Traversal File Read via FileDownloadController

An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability

A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6

An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6

rConfig Core < 8.2.8 Privilege Escalation via Users API role field

A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6

rConfig 3.9.4 is vulnerable to reflected XSS

rConfig 3.9.4 is vulnerable to reflected XSS

rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system