exploit/linux/http/rconfig_vendors_auth_file_upload_rce

weaponized

rConfig Vendors Auth File Upload RCE

view exploit source metasploittype exploitpublished 2021-03-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-44384US	high8.8	5.64% (93rd)	Exploit	2022-11-17
An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.