CVE-2020-23150 | BDVDB-2026-158367 Detail

Description#

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a2048094816d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L97

Exploit#

No public exploit known

History#

Version 12021-08-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.