Description
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted ZIP file.
Unscored
CVE-2020-27464
EUVD-2020-19974GHSA-r7p8-8gcf-v2q3
An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafte…
Published Aug 20, 2021 · Updated Aug 4, 2024 · Assigned by mitre