E20-9s301
CVSS:
7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
False Positive:
t
Variants:
4
Year:
2020
Description
This strike exploits an SQL injection vulnerability in the rConfig server. The vulnerability exists in rConfig 3.9.4 and prior versions. The vulnerability is caused by insufficient validation of the 'searchField' and 'searchColumn' parameter in the 'commands.inc.php' module. Successful exploitation could allow an attacker to execute SQL command on the target server.
