CVE-2020-23151

CRITICAL

rconfig 3.9.5 - OS Command Injection via ajaxArchiveFiles.php Path Parameter

Title source: llm

Description

rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_misc

https://cwe.mitre.org/data/definitions/78.html

Exploit, Third Party Advisory x_refsource_misc

https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/lib/ajaxHandlers/ajaxArchiveFiles.php#L13

Scores

CVSS v3 9.8

EPSS 0.0572

EPSS Percentile 92.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (1)

rconfig/rconfig 3.9.5

Published Aug 09, 2021

Tracked Since Feb 18, 2026