CVE-2020-10221

rConfig OS Command Injection Vulnerability

Beschreibung

rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter.

Schweregrad: HIGH

CVSS-Score: 8.8

Hersteller: rConfig

Produkt: rConfig