EDB-47982

functional

rConfig 3.9.3 - Authenticated Remote Code Execution

view exploit source exploit_dbverifiedtype webappsauthor vikingfrpublished 2020-01-30catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-19509UShigh8.8Exploit
An issue was discovered in rConfig 3.9.3. A remote authenticated user can directly execute system commands by sending a GET request to ajaxArchiveFiles.php because the path paramet…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan