CVE-2020-23148

概要

参考情報

• cwe.mitre.org/data/definitions/90.html · Third Party Advisory
• rconfig/rconfig · Exploit

rconfig のその他の脆弱性

• CVE-2026-63102中 5.4rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any acc…
• CVE-2023-39110高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnera…
• CVE-2023-39109高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/co…
• CVE-2023-39108高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/co…
• CVE-2022-45030高 8.8A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secur…