| Package | Affected versions | Patched versions |
|---|---|---|
| rconfig | ≤ 3.9.4 |
rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free