Priority LOW 24
rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting an unvalidated role field through the Users API during user c…
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2026-07-20 · Fixed in 8.2.8 CWE-915
Priority HIGH 73
rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03651 · Published 2023-08-01 · No fix listed CWE-918
Priority HIGH 73
rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0394 · Published 2023-08-01 · No fix listed CWE-918
Priority HIGH 73
rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0394 · Published 2023-08-01 · No fix listed CWE-918
Priority MEDIUM 49
A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02685 · Published 2023-04-15 · No fix listed CWE-89
Priority LOW 30
An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HTTP request.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00713 · Published 2023-03-27 · No fix listed
Priority MEDIUM 49
An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.05637 · Published 2022-11-17 · No fix listed CWE-434
Priority MEDIUM 42
Insecure permission of chmod command on rConfig server 3.9.6 exists.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02154 · Published 2021-10-11 · No fix listed CWE-276
Priority LOW 37
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04874 · Published 2021-10-11 · No fix listed CWE-22
Priority MEDIUM 42
rConfig 3.9.6 is affected by SQL Injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.021 · Published 2021-10-11 · No fix listed CWE-89
Priority LOW 38
An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code via a crafted file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01894 · Published 2021-08-20 · No fix listed CWE-862
Priority LOW 39
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0246 · Published 2021-08-20 · No fix listed CWE-862
Priority MEDIUM 44
An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0225 · Published 2021-08-20 · No fix listed CWE-862
Priority LOW 31
A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00988 · Published 2021-08-20 · No fix listed CWE-918
Priority LOW 28
A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.02006 · Published 2021-08-20 · No fix listed CWE-79
Priority LOW 31
An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01122 · Published 2021-08-20 · No fix listed CWE-552
Priority MEDIUM 51
rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05718 · Published 2021-08-09 · No fix listed CWE-78
Priority LOW 36
A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01558 · Published 2021-08-09 · No fix listed CWE-89
Priority LOW 36
The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01353 · Published 2021-08-09 · No fix listed CWE-89
Priority LOW 36
The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01623 · Published 2021-08-09 · No fix listed CWE-74
Priority HIGH 81
lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.76853 · Published 2020-11-13 · No fix listed CWE-269
Priority MEDIUM 45
rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04392 · Published 2020-10-19 · No fix listed CWE-78
Priority MEDIUM 49
rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.04202 · Published 2020-07-28 · No fix listed
Priority MEDIUM 43
rConfig 3.9.5 is vulnerable to SQL injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02791 · Published 2020-07-28 · No fix listed CWE-89
Priority MEDIUM 43
rConfig 3.9.5 is vulnerable to SQL injection.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02791 · Published 2020-07-28 · No fix listed CWE-89
Load more
THREATIST.IORead the docs