Security Advisory
CVE-2020-23151
9.8
CRITICAL
Vulnerability Description
rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.
Published Date
August 9, 2021
Official Source
NIST NVD Advisory