ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score

1 result for “CVE-2020-23151”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-23151
Published
2021-08-09
CVSS:
9.8
ShadowTrackr CVSS:
8.2
Summary:
rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.