high7.8
CVE-2020-27464
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
Impact
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rconfig | Rconfig | through 3.9.6 |