Headline
CVE-2022-45030
A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).
k2�َw4;�q� '>Fǩ�l��%-��mO��u5v���8f�HѵI��J��< >Mz�$�0Ϝɣ���)oK�ݖDm�s[�\Y������f-�J�{�0�u�0~��d�U���U[z���P�L _ֶJv���;`�Ó�O8_cW�i@ۄ9�y 7ۆ�D{����O;��d��n�u�H�Ξ�D"�8Q���L��y�6I�ɮh��߂ΰ��^�%��mB�D=ڎ��_4;�/�1z�Dd췧�q��R��"URٝa8��_�[U���y�5�f�ʟ5^��*g���mTVp�m�I�.�,��w�CȚ�"���o�’�ξi�R �G��`�@7]��� .�,m�o��-1R�(ʢ�e(���R���+P }^�@���G`�w8tL`>#c�=�e�g�mI�>A�/ׁ� uk�U�����de�����q���� �0b철+B!�(�X�p���+��B#����t�{�D�’��TI�L�\
Related news
rconfig 3.9.7 SQL Injection
rconfig version 3.9.7 suffers from a remote SQL injection vulnerability.