CVE-2022-45030

Description

References

• packetstormsecurity.com/files/171613/rconfig-3.9.7-SQL-Injection.html · Exploit
• rconfig.com/downloads/rconfig-3.9.7.zip · Product

Weitere Schwachstellen in rconfig

• CVE-2026-63102MITTEL 5.4rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any acc…
• CVE-2023-39110HOCH 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnera…
• CVE-2023-39109HOCH 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/co…
• CVE-2023-39108HOCH 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/co…
• CVE-2023-24366MITTEL 6.5An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.