CVE-2022-45030

概要

参考情報

• packetstormsecurity.com/files/171613/rconfig-3.9.7-SQL-Injection.html · Exploit
• rconfig.com/downloads/rconfig-3.9.7.zip · Product

rconfig のその他の脆弱性

• CVE-2026-63102中 5.4rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any acc…
• CVE-2023-39110高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnera…
• CVE-2023-39109高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/co…
• CVE-2023-39108高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/co…
• CVE-2023-24366中 6.5An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.