CVE-2020-15715

Published: Jul 28, 2020Modified: Jun 17, 2026

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: NVD

Description

rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability using the nodeId parameter.

Affected (1)

Products: Rconfig: Rconfig

Rconfig

1 product

Rconfig

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Rconfig Rconfig	Version 3.9.5

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/184941

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.rconfig.com/downloads/v3-release-notes

Source: cve@mitre.org

Release NotesVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/184941

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.rconfig.com/downloads/v3-release-notes

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.