PT-2021-10843
CVE-2020-23149
·
تاريخ النشر
2021-08-09
·
تاريخ التحديث
2021-08-12
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
rConfig version 3.9.5
Description
The issue allows attackers to perform a SQL injection and access sensitive database information due to the unsanitized
dbName parameter in the ajaxDbInstall.php file.Recommendations
For rConfig version 3.9.5, consider sanitizing the
dbName parameter in the ajaxDbInstall.php file to prevent SQL injection attacks. As a temporary workaround, restrict access to the ajaxDbInstall.php file until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾