Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2020-10220
An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.94
EPSS Ranking
99.9%
CVSS Severity
CVSS v3 Score
9.8
CVSS v2 Score
7.5
References
http://packetstormsecurity.com/files/156688/rConfig-3.9-SQL-Injection.html
http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-Execution.html
http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html
https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2020-10220.py
https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_sqli.py
http://packetstormsecurity.com/files/156688/rConfig-3.9-SQL-Injection.html
http://packetstormsecurity.com/files/156766/Rconfig-3.x-Chained-Remote-Code-Execution.html
http://packetstormsecurity.com/files/156950/rConfig-3.9.4-searchField-Remote-Code-Execution.html
https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_CVE-2020-10220.py
https://github.com/v1k1ngfr/exploits-rconfig/blob/master/rconfig_sqli.py
Products affected by CVE-2020-10220
Rconfig
»
Rconfig
»
Version:
1.0.0
cpe:2.3:a:rconfig:rconfig:1.0.0
Rconfig
»
Rconfig
»
Version:
1.0.11
cpe:2.3:a:rconfig:rconfig:1.0.11
Rconfig
»
Rconfig
»
Version:
1.1.2
cpe:2.3:a:rconfig:rconfig:1.1.2
Rconfig
»
Rconfig
»
Version:
1.2.0
cpe:2.3:a:rconfig:rconfig:1.2.0
Rconfig
»
Rconfig
»
Version:
1.2.4
cpe:2.3:a:rconfig:rconfig:1.2.4
Rconfig
»
Rconfig
»
Version:
1.2.5
cpe:2.3:a:rconfig:rconfig:1.2.5
Rconfig
»
Rconfig
»
Version:
1.2.6
cpe:2.3:a:rconfig:rconfig:1.2.6
Rconfig
»
Rconfig
»
Version:
1.2.7
cpe:2.3:a:rconfig:rconfig:1.2.7
Rconfig
»
Rconfig
»
Version:
1.2.8
cpe:2.3:a:rconfig:rconfig:1.2.8
Rconfig
»
Rconfig
»
Version:
1.2.9
cpe:2.3:a:rconfig:rconfig:1.2.9
Rconfig
»
Rconfig
»
Version:
2.0.0
cpe:2.3:a:rconfig:rconfig:2.0.0
Rconfig
»
Rconfig
»
Version:
2.0.1
cpe:2.3:a:rconfig:rconfig:2.0.1
Rconfig
»
Rconfig
»
Version:
2.0.3
cpe:2.3:a:rconfig:rconfig:2.0.3
Rconfig
»
Rconfig
»
Version:
3.0.0
cpe:2.3:a:rconfig:rconfig:3.0.0
Rconfig
»
Rconfig
»
Version:
3.0.1
cpe:2.3:a:rconfig:rconfig:3.0.1
Rconfig
»
Rconfig
»
Version:
3.0.2
cpe:2.3:a:rconfig:rconfig:3.0.2
Rconfig
»
Rconfig
»
Version:
3.0.3
cpe:2.3:a:rconfig:rconfig:3.0.3
Rconfig
»
Rconfig
»
Version:
3.1.0
cpe:2.3:a:rconfig:rconfig:3.1.0
Rconfig
»
Rconfig
»
Version:
3.1.1
cpe:2.3:a:rconfig:rconfig:3.1.1
Rconfig
»
Rconfig
»
Version:
3.5.0
cpe:2.3:a:rconfig:rconfig:3.5.0
Rconfig
»
Rconfig
»
Version:
3.5.1
cpe:2.3:a:rconfig:rconfig:3.5.1
Rconfig
»
Rconfig
»
Version:
3.5.2
cpe:2.3:a:rconfig:rconfig:3.5.2
Rconfig
»
Rconfig
»
Version:
3.5.4
cpe:2.3:a:rconfig:rconfig:3.5.4
Rconfig
»
Rconfig
»
Version:
3.6.0
cpe:2.3:a:rconfig:rconfig:3.6.0
Rconfig
»
Rconfig
»
Version:
3.6.7
cpe:2.3:a:rconfig:rconfig:3.6.7
Rconfig
»
Rconfig
»
Version:
3.6.8
cpe:2.3:a:rconfig:rconfig:3.6.8
Rconfig
»
Rconfig
»
Version:
3.6.9
cpe:2.3:a:rconfig:rconfig:3.6.9
Rconfig
»
Rconfig
»
Version:
3.7.5
cpe:2.3:a:rconfig:rconfig:3.7.5
Rconfig
»
Rconfig
»
Version:
3.8.0
cpe:2.3:a:rconfig:rconfig:3.8.0
Rconfig
»
Rconfig
»
Version:
3.8.6
cpe:2.3:a:rconfig:rconfig:3.8.6
Rconfig
»
Rconfig
»
Version:
3.8.7
cpe:2.3:a:rconfig:rconfig:3.8.7
Rconfig
»
Rconfig
»
Version:
3.9.0
cpe:2.3:a:rconfig:rconfig:3.9.0
Rconfig
»
Rconfig
»
Version:
3.9.1
cpe:2.3:a:rconfig:rconfig:3.9.1
Rconfig
»
Rconfig
»
Version:
3.9.2
cpe:2.3:a:rconfig:rconfig:3.9.2
Rconfig
»
Rconfig
»
Version:
3.9.3
cpe:2.3:a:rconfig:rconfig:3.9.3
Rconfig
»
Rconfig
»
Version:
3.9.4
cpe:2.3:a:rconfig:rconfig:3.9.4
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved