CVE-2023-39110

概要

参考情報

• zer0yu/CVE_Request · Exploit

rconfig のその他の脆弱性

• CVE-2026-63102中 5.4rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any acc…
• CVE-2023-39109高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/co…
• CVE-2023-39108高 8.8rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/co…
• CVE-2022-45030高 8.8A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secur…
• CVE-2023-24366中 6.5An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.