Security Advisory

CVE-2020-23151

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-09 22:54:16

Last updated 2024-08-04 14:58:14

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.

← Browse all CVEs View on cve.org ↗