high8.8Public exploit code
CVE-2022-45030
A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- rconfig 3.9.7 - Sql Injection (Authenticated)2023-03-31 · webapps · php
Impact
A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= (this may interact with secure-file-priv).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rconfig | Rconfig | Version 3.9.7 |