Security Advisory

CVE-2020-13778

8.8
HIGH

Vulnerability Description

rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php.
Published Date October 19, 2020
Official Source NIST NVD Advisory