CVE-2022-44384

HIGH

rconfig 3.9.6 - Arbitrary File Upload

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-44384 has a selected CVSS score of 8.8 (high); EIP currently links 2 catalogued exploits.

Description

An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 29, 2025 · Source: CVE List

Proofs of concept

2

Catalogued exploits

ExploitDBrconfig 3.9.6 - Arbitrary File UploadExploitDB exploitby Vishwaraj BhattraiNot analyzed1 file
ExploitDB
PoC details
MetasploitrConfig Vendors Auth File Upload RCEMetasploit exploitby MURAT ŞEKER +2 moreNot analyzed1 file

Ruby

Metasploit
PoC details

References

2